← voltar
CVE-2010-1929

CVE-2010-1929

EPSS 16.1%
Multiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20 function in jclient.dll in the Tomcat web server in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allow remote authenticated users to execute arbitrary code via the (1) EnteredClassID or (2) NewClassName parameter to nps/servlet/webacc.
Produtos afetados
n/a · n/a
PoCs públicas encontradas — 2
cve_referencewww.exploit-db.com/exploits/14010não verificadoexploitdbwww.exploit-db.com/exploits/14010não verificado
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://secunia.com/advisories/40281http://securitytracker.com/id?1024152https://exchange.xforce.ibmcloud.com/vulnerabilities/59694http://www.coresecurity.com/content/novell-imanager-buffer-overflow-off-by-one-vulnerabilitieshttp://www.exploit-db.com/exploits/14010http://www.osvdb.org/65737http://www.securityfocus.com/archive/1/511983/100/0/threadedhttp://www.securityfocus.com/bid/40480http://www.vupen.com/english/advisories/2010/1575