Novell Ichain
15 CVEs affecting Novell Ichain. Latest disclosed: 2005-05-02. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2005-0746 | | 2005-05-02 | The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via the PWD comm… | |
CVE-2005-0744 | | 2005-05-02 | The web GUI for Novell iChain 2.2 and 2.3 SP2 and SP3 allows attackers to hijack sessions and gain administrator privileges by (1) sniffing the connection on T… | |
CVE-2005-0798 | | 2005-03-15 | Novell iChain Mini FTP Server 2.3, and possibly earlier versions, does not limit the number of incorrect logins, which makes it easier for remote attackers to… | |
CVE-2005-0797 | | 2005-03-15 | Novell iChain Mini FTP Server 2.3 displays different error messages if a user exists or not, which allows remote attackers to obtain sensitive information and… | |
CVE-2004-2757 | | 2004-12-31 | Cross-site scripting (XSS) vulnerability in the failed login page in Novell iChain before 2.2 build 2.2.113 and 2.3 First Customer Ship (FCS) allows remote att… | |
CVE-2004-2582 | | 2004-12-31 | Novell iChain 2.3 includes the build number in the VIA line of the proxy server's HTTP headers, which allows remote attackers to obtain sensitive information. | |
CVE-2004-2581 | | 2004-12-31 | Novell iChain 2.3 allows attackers to cause a denial of service via a URL with a "specific string." | |
CVE-2004-2580 | | 2004-12-31 | Cross-site scripting (XSS) vulnerability in Novell iChain 2.3 allows remote attackers to obtain login credentials via unspecified vectors. | |
CVE-2004-2579 | | 2004-12-31 | ACLCHECK module in Novell iChain 2.3 allows attackers to bypass access control rules of an unspecified component via an unspecified attack vector involving a s… | |
CVE-2004-2314 | | 2004-12-31 | The Telnet listener for Novell iChain Server before 2.2 Field Patch 3b 2.2.116 does not have a password by default, which allows remote attackers to gain acces… | |
CVE-2003-0639 | | 2003-08-27 | Unknown vulnerability in Novell iChain 2.2 before Support Pack 1 allows users to access restricted or secure pages without authentication. | |
CVE-2003-0638 | | 2003-08-27 | Multiple buffer overflows in Novell iChain 2.1 before Field Patch 3, and iChain 2.2 before Field Patch 1a, allow attackers to cause a denial of service (ABEND)… | |
CVE-2003-0637 | | 2003-08-27 | Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote attackers to guess u… | |
CVE-2003-0636 | | 2003-08-27 | Novell iChain 2.2 before Support Pack 1 does not properly verify that URL redirects match the DNS name of an accelerator, which allows attackers to redirect UR… | |
CVE-2003-0635 | | 2003-08-27 | Unknown vulnerability or vulnerabilities in Novell iChain 2.2 before Support Pack 1, with unknown impact, possibly related to unauthorized access to (1) NCPIP… |