CVE-2006-4517 Null dereference in n/a
Remote attackers can crash the Tomcat server in Novell iManager by sending a long TREE parameter in an HTTP POST request.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2006-4517?
CVE-2006-4517 is a high-severity vulnerability in n/a, published on 1 Nov 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Novell iManager 2.5 and 2.0.2 allows remote attackers to cause a denial of service (crash) in the Tomcat server via a long TREE parameter in an HTTP POST, which triggers a NULL pointer dereference.
Which versions are affected by CVE-2006-4517?
It affects 1 product.
Products include Novell Imanager.
How do I fix CVE-2006-4517?
No fix has been published for CVE-2006-4517 yet. Limit exposure of the affected software until one is available.
Is CVE-2006-4517 being exploited?
There is no known exploitation of CVE-2006-4517 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2013-3268 Auth bypass in n/a
- CVE-2005-1730 Null dereference in n/a
- CVE-2010-1929 Memory corruption in n/a
- CVE-2009-4486 Memory corruption in n/a
- CVE-2008-3488 Unspecified vulnerability in Novell iManager before 2.7 SP1 (2.7.1) allows remote attackers to delete Plug-in Studio created Property Book P
Sources
Also known as GHSA-h747-m9jw-xj3m.