Novell iChain access control solution multiple bugs updated since 30.08.2004
Published:		16.03.2005
Source:		SECUNIA
SecurityVulns ID:		3954
Type:		remote
Level:		6/10
Description:		DoS, information leak (including authentication data), crossite scripting, session hijacking.

Affected:

NOVELL : iChain 2.3

Original document		Francisco Amato, [ISR] Insecure communication and Reproduce the Session authentication (16.03.2005)
		Francisco Amato, [ISR] - Novell iChain Mini FTP Server Bruteforce Problem (16.03.2005)
		Francisco Amato, [ISR] - Novell iChain Mini FTP Server Unauthorized Remote Path Disclosure Vulnerability (16.03.2005)
		Francisco Amato, [ISR] - Novell iChain Mini FTP Server Valid User Disclosure Vulnerability (16.03.2005)
		SECUNIA, [SA14537] Novell iChain FTP Server Path Disclosure Weakness (09.03.2005)
		SECUNIA, [SA14527] Novell iChain Administrator Session Hijacking Vulnerability (09.03.2005)
		SECUNIA, [SA14010] iChain Mutual Authentication Unauthorised Resource Access (27.01.2005)
		SECUNIA, [SA12366] iChain Multiple Vulnerabilities (30.08.2004)

Discuss:

Read or add your comments to this news (0 comments)