Denial of Service Vulnerability in Novell iManager Affects Tomcat Server
CVE-2006-4517

Currently unrated

Key Information:

Vendor

Novell
Status
Imanager
Vendor
CVE Published:
1 November 2006

What is CVE-2006-4517?

A vulnerability in Novell iManager versions 2.0.2 and 2.5 allows remote attackers to disrupt service by sending a specially crafted HTTP POST request with a lengthy TREE parameter. This action triggers a NULL pointer dereference in the Tomcat server, resulting in a denial of service condition. The affected management interface can lead to significant downtime and disruption for users, highlighting the importance of monitoring and patching vulnerable systems.

References

http://www.vupen.com/english/advisories/2006/4292
vdb-entryx_refsource_VUPEN
http://securitytracker.com/id?1017139
vdb-entryx_refsource_SECTRACK
http://labs.idefense.com/intelligence/vulnerabilities/dis...
third-party-advisoryx_refsource_IDEFENSE

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.