CVE-2010-1929

CRITICAL 9.0CVE-2010-1929 · Published 28/06/2010 · updated 16/06/2026

Package	Affected versions	Patched versions
imanager novell	`= 2.7.0= 2.7.3`	No fix yet

Description

Multiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20 function in jclient.dll in the Tomcat web server in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allow remote authenticated users to execute arbitrary code via the (1) EnteredClassID or (2) NewClassName parameter to nps/servlet/webacc.

References

secunia.com/advisories/40281 · Vendor Advisory
securitytracker.com/id · Exploit
coresecurity.com/content/novell-imanager-buffer-overflow-off-by-one-vulnerabilities · Exploit
exploit-db.com/exploits/14010 · Exploit
osvdb.org/65737
securityfocus.com/archive/1/511983/100/0/threaded
securityfocus.com/bid/40480 · Exploit
vupen.com/english/advisories/2010/1575 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/59694

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free