Page 6 of 54 results (0.023 seconds)

CVSS: 7.5EPSS: 4%CPEs: 1EXPL: 0

CVE-2007-6625

https://notcve.org/view.php?id=CVE-2007-6625

04 Jan 2008 — The Platform Service Process (asampsp) in Fan-Out Driver Platform Services for Novell Identity Manager (IDM) 3.5.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified network traffic that triggers a syslog message containing invalid format string specifiers, as demonstrated by a Nessus scan. El Platform Service Process (asampsp) de Fan-Out Driver Platform Services para Novell Identity Manager (IDM) 3.5.1 permite a atacantes remotos provocar una denegación de servicio (caída d... • http://osvdb.org/40104 • CWE-134: Use of Externally-Controlled Format String •

CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2007-4526

https://notcve.org/view.php?id=CVE-2007-4526

25 Aug 2007 — The Client Login Extension (CLE) in Novell Identity Manager before 3.5.1 20070730 stores the username and password in a local file, which allows local users to obtain sensitive information by reading this file. La Client Login Extension (CLE) de Novell Identity Manager versiones anteriores a 3.5.1 20070730 almacena nombre de usuario y contraseña en un fichero local, lo cual permite a usuarios locales obtener información confidencial leyendo este fichero. • http://osvdb.org/37320 • CWE-255: Credentials Management Errors •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2006-4803

https://notcve.org/view.php?id=CVE-2006-4803

14 Sep 2006 — The Fan-Out Linux and UNIX receiver scripts in Novell Identity Manager (IDM) 3.0.1 allows local users to execute arbitrary commands via unspecified vectors involving certain environment variables and "code injection." La secuencia de comandos del receptor de fan-out de linux y UNIX permite a un usuario local ejecutar comandos de su elección a través de vectores sin especificar que implican ciertas varibles de entorno e "inyecciòn de código". • http://secunia.com/advisories/21888 •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2006-4506

https://notcve.org/view.php?id=CVE-2006-4506

31 Aug 2006 — idmlib.sh in nxdrv in Novell Identity Manager (IDM) 3.0.1 allows local users to execute arbitrary commands via unspecified vectors, possibly involving the " (quote) and \ (backslash) characters and eval injection. idmlib.sh en nxdrv en Novell Identity Manager (IDM) 3.0.1 permite a usuarios locales ejecutar órdenes de su elección mediante vectores no especificados, posiblemente implicando los caractéres " (comillas) y \ (contrabarra) en una inyección de 'eval'. • http://securitytracker.com/id?1016741 •