CVE-2010-1929 in Novell eDirectory

摘要 (英语)

Multiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20 function in jclient.dll in the Tomcat web server in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allow remote authenticated users to execute arbitrary code via the (1) EnteredClassID or (2) NewClassName parameter to nps/servlet/webacc.

预定

2010-05-11

披露

2010-06-28

条目

VulDB provides additional information and datapoints for this CVE:

标识符	漏洞	CWE	可利用	对策	CVE
4834	Novell eDirectory LDAP FreeNDSReferralList 内存损坏	119	概念验证	官方修复	CVE-2010-1929
4833	Novell eDirectory LDAP RelativeToFullDN 内存损坏	119	概念验证	官方修复	CVE-2010-1929