PT-2005-1779 · Novell · Novell Ichain

Publicado 2005-03-13 · Atualizado 2017-07-11 · CVE-2005-0744

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell iChain versions 2.2 through 2.3 SP3

Description The issue allows attackers to hijack sessions and gain administrator privileges through two methods: (1) sniffing the connection on TCP port 51100 and replaying the authentication information or (2) obtaining and replaying the PCZQX02 authentication cookie from the browser.

Recommendations For Novell iChain versions 2.2 through 2.3 SP3, consider restricting access to TCP port 51100 to minimize the risk of session hijacking and implement secure cookie handling practices to prevent replaying of the PCZQX02 authentication cookie.

Correção

Identificadores relacionados

CVE-2005-0744

Produtos afetados

Novell Ichain

Referências · 6

• http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096885.htm · Correção
• http://securitytracker.com/id?1013406 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0744 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0744 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19646 · Nota
• http://secunia.com/advisories/14527 · Aviso do Fabricante