CVE-2010-1929

Multiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20 function in jclient.dll in the Tomcat web server in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allow remote authenticated users to execute arbitrary code via the (1) EnteredClassID or (2) NewClassName parameter to nps/servlet/webacc.

CVSS v2.0 9.0 HIGH

9.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability : 8.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/40281	Vendor Advisory
http://www.securityfocus.com/bid/40480	Exploit
http://securitytracker.com/id?1024152	Exploit
http://www.osvdb.org/65737
http://www.vupen.com/english/advisories/2010/1575	Vendor Advisory
http://www.exploit-db.com/exploits/14010	Exploit
http://www.coresecurity.com/content/novell-imanager-buffer-overflow-off-by-one-vulnerabilities	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/59694
http://www.securityfocus.com/archive/1/511983/100/0/threaded

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:novell:imanager:2.7.3:ftf2::::::
	cpe:2.3:a:novell:imanager:2.7.0:::::::*
	cpe:2.3:a:novell:imanager:2.7.3:::::::*

Information

Published : 2010-06-28 10:30

Updated : 2018-10-10 12:58

NVD link : CVE-2010-1929

Mitre link : CVE-2010-1929

JSON object : View

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Advertisement

Products Affected

novell

imanager

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://secunia.com/advisories/40281", "name": "40281", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.securityfocus.com/bid/40480", "name": "40480", "tags": ["Exploit"], "refsource": "BID"}, {"url": "http://securitytracker.com/id?1024152", "name": "1024152", "tags": ["Exploit"], "refsource": "SECTRACK"}, {"url": "http://www.osvdb.org/65737", "name": "65737", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.vupen.com/english/advisories/2010/1575", "name": "ADV-2010-1575", "tags": ["Vendor Advisory"], "refsource": "VUPEN"}, {"url": "http://www.exploit-db.com/exploits/14010", "name": "14010", "tags": ["Exploit"], "refsource": "EXPLOIT-DB"}, {"url": "http://www.coresecurity.com/content/novell-imanager-buffer-overflow-off-by-one-vulnerabilities", "name": "http://www.coresecurity.com/content/novell-imanager-buffer-overflow-off-by-one-vulnerabilities", "tags": ["Exploit"], "refsource": "MISC"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59694", "name": "imanager-class-bo(59694)", "tags": [], "refsource": "XF"}, {"url": "http://www.securityfocus.com/archive/1/511983/100/0/threaded", "name": "20100623 CORE-2010-0316 - Novell iManager Multiple Vulnerabilities", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Multiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20 function in jclient.dll in the Tomcat web server in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allow remote authenticated users to execute arbitrary code via the (1) EnteredClassID or (2) NewClassName parameter to nps/servlet/webacc."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-119"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2010-1929", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 9.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2010-06-28T17:30Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:novell:imanager:2.7.3:ftf2:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:novell:imanager:2.7.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:novell:imanager:2.7.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-10T19:58Z"}