Access Control Bypass in Novell iChain 2.3
CVE-2004-2579

Currently unrated

Key Information:

Vendor

Novell

Status
Vendor
CVE Published:
31 December 2004

What is CVE-2004-2579?

The ACLCHECK module in Novell iChain 2.3 is susceptible to a flaw that allows attackers to bypass essential access control rules. This can be exploited through an attack vector utilizing a string containing escape sequences, specifically those represented by overlong UTF-8 encoding. By manipulating the input, an unauthorized individual may gain access to restricted resources, highlighting the need for prompt remediation for users of this software.

References

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.