Ichain (Novell) - vulnerabilities (CVEs)
14 CVEs, 0 in the last 30 days, 16 known versions, newest CVE from 2005-05-02. Vendor: Novell.
CVEs of Ichain
- CVE-2005-0744 - CVSS 10 (critical), 2005-05-02: The web GUI for Novell iChain 2.2 and 2.3 SP2 and SP3 allows attackers to hijack sessions and gain administrator privileges by (1) sniffing the connection on…
- CVE-2005-0746 - CVSS 5 (medium), 2005-05-02: The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via the PWD…
- CVE-2005-0798 - CVSS 7.5 (high), 2005-03-15: Novell iChain Mini FTP Server 2.3, and possibly earlier versions, does not limit the number of incorrect logins, which makes it easier for remote attackers to…
- CVE-2004-2579 - CVSS 7.5 (high), 2004-12-31: ACLCHECK module in Novell iChain 2.3 allows attackers to bypass access control rules of an unspecified component via an unspecified attack vector involving a…
- CVE-2004-2582 - CVSS 5 (medium), 2004-12-31: Novell iChain 2.3 includes the build number in the VIA line of the proxy server's HTTP headers, which allows remote attackers to obtain sensitive information.
- CVE-2004-2314 - CVSS 7.5 (high), 2004-12-31: The Telnet listener for Novell iChain Server before 2.2 Field Patch 3b 2.2.116 does not have a password by default, which allows remote attackers to gain…
- CVE-2004-2581 - CVSS 5 (medium), 2004-12-31: Novell iChain 2.3 allows attackers to cause a denial of service via a URL with a "specific string."
- CVE-2004-2580 - CVSS 5.8 (medium), 2004-12-31: Cross-site scripting (XSS) vulnerability in Novell iChain 2.3 allows remote attackers to obtain login credentials via unspecified vectors.
- CVE-2004-2757 - CVSS 4.3 (medium), 2004-12-31: Cross-site scripting (XSS) vulnerability in the failed login page in Novell iChain before 2.2 build 2.2.113 and 2.3 First Customer Ship (FCS) allows remote…
- CVE-2003-0638 - CVSS 7.5 (high), 2003-08-27: Multiple buffer overflows in Novell iChain 2.1 before Field Patch 3, and iChain 2.2 before Field Patch 1a, allow attackers to cause a denial of service…
- CVE-2003-0637 - CVSS 5 (medium), 2003-08-27: Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote attackers to guess…
- CVE-2003-0636 - CVSS 7.5 (high), 2003-08-27: Novell iChain 2.2 before Support Pack 1 does not properly verify that URL redirects match the DNS name of an accelerator, which allows attackers to redirect…
- CVE-2003-0639 - CVSS 5 (medium), 2003-08-27: Unknown vulnerability in Novell iChain 2.2 before Support Pack 1 allows users to access restricted or secure pages without authentication.
- CVE-2003-0635 - CVSS 5 (medium), 2003-08-27: Unknown vulnerability or vulnerabilities in Novell iChain 2.2 before Support Pack 1, with unknown impact, possibly related to unauthorized access to (1)…
