CVE-2005-3655

Related Files

iDEFENSE Security Advisory 2006-01-13.t

Posted Jan 15, 2006

Authored by iDefense Labs | Site idefense.com

iDefense Security Advisory 01.13.06 - Remote exploitation of a heap overflow vulnerability in Novell Inc.'s Open Enterprise Server Remote Manager allows attackers to execute arbitrary code. iDefense has confirmed this vulnerability in Novell SUSE Linux Enterprise Server 9. All previous versions are suspected vulnerable. Novell SUSE Linux Enterprise Server components are included in Novell Open Enterprise Server; as such, Open Enterprise Server is also vulnerable.

tags | advisory, remote, overflow, arbitrary

systems | linux, suse

advisories | CVE-2005-3655

SHA-256 | 197db68e48a10d85b265fb699041cf0c6e9abc7b8a68545fc33a0559c112dcc7

Download | Favorite | View

SUSA-SA-2006-002.txt

Posted Jan 15, 2006

Site suse.com

SUSE Security Announcement - iDEFENSE reported a security problem with the Novell Remote Manager. By passing a huge or negative size via a HTTP request header to httpstkd it was possible to corrupt heap memory and so potentially execute code.

tags | advisory, remote, web

systems | linux, suse

advisories | CVE-2005-3655

SHA-256 | 87bf1965c10956fc2c5e9eaba8f5e3a7ec9b2235ed03cbed1250c56b594036e8

Download | Favorite | View