CVEvulnerability
CVE-2010-1929
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-06-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20 function in jclient.dll in the Tomcat web server in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allow remote authenticated users to execute arbitrary code via the (1) EnteredClassID or (2) NewClassName parameter to nps/servlet/webacc.
Affected configurations
• novell imanager 2.7.0
• novell imanager 2.7.3
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/40281 Vendor Advisory
- http://securitytracker.com/id?1024152 Exploit
- http://www.coresecurity.com/content/novell-imanager-buffer-overflow-off-by-one-vulnerabilities Exploit
- http://www.exploit-db.com/exploits/14010 Exploit
- http://www.osvdb.org/65737 www.osvdb.org
- http://www.securityfocus.com/archive/1/511983/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/40480 Exploit
- http://www.vupen.com/english/advisories/2010/1575 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59694 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/40281 Vendor Advisory
- http://securitytracker.com/id?1024152 Exploit
- http://www.coresecurity.com/content/novell-imanager-buffer-overflow-off-by-one-vulnerabilities Exploit
- http://www.exploit-db.com/exploits/14010 Exploit
- http://www.osvdb.org/65737 www.osvdb.org
- http://www.securityfocus.com/archive/1/511983/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/40480 Exploit
- http://www.vupen.com/english/advisories/2010/1575 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59694 exchange.xforce.ibmcloud.com