CVE-2006-4517
Novell iManager < 2.5 - Denial of Service via Long TREE Parameter
Title source: llmDescription
Novell iManager 2.5 and 2.0.2 allows remote attackers to cause a denial of service (crash) in the Tomcat server via a long TREE parameter in an HTTP POST, which triggers a NULL pointer dereference.
References (7)
Core 7
Core References
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2006/4292
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1017139
Patch third-party-advisory
x_refsource_idefense
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=436
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/29961
Patch, Vendor Advisory x_refsource_confirm
http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=3885713&sliceId=SAL_Public&dialogID=17090866&stateId=0%200%2017098735
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/20841
Patch, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/22657
Scores
EPSS
0.0291
EPSS Percentile
86.6%
Details
CWE
CWE-189
CWE-399
Status
published
Products (4)
novell/imanager
1.5
novell/imanager
2.0
novell/imanager
2.0.2
novell/imanager
< 2.5
Published
Nov 01, 2006
Tracked Since
Feb 18, 2026