Vulnerability in Novell Ichain
CVE-2003-0636
Novell iChain 2.2 before Support Pack 1 does not properly verify that URL redirects match the DNS name of an accelerator, which allows attackers to redirect URLs to malicious web sites.
EPSS: 0.012 (64.3th percentile) — read the EPSS interpretation.
Affected products
- Novell Ichain — versions 2.2
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CONFIRM, Patch)