CVE-2006-4517

Currently unrated

Key Information:

Vendor
Novell
Status
Imanager
Vendor
CVE Published:
1 November 2006

Summary

Novell iManager 2.5 and 2.0.2 allows remote attackers to cause a denial of service (crash) in the Tomcat server via a long TREE parameter in an HTTP POST, which triggers a NULL pointer dereference.

References

http://www.vupen.com/english/advisories/2006/4292
vdb-entryx_refsource_VUPEN
http://securitytracker.com/id?1017139
vdb-entryx_refsource_SECTRACK
http://labs.idefense.com/intelligence/vulnerabilities/dis...
third-party-advisoryx_refsource_IDEFENSE

EPSS Score

3% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.