PT-2007-3799 · Novell · Novell Securelogin

Publicado 2007-05-02 · Atualizado 2011-03-08 · CVE-2007-2475

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Novell SecureLogin versions prior to 6.0.106

Description The issue is related to an unspecified vulnerability in the ADSCHEMA utility, which can grant users excess permissions to their own attributes. This vulnerability has unknown impact and can be exploited remotely.

Recommendations For versions prior to 6.0.106, update to version 6.0.106 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-2475

Produtos afetados

Novell Securelogin

Referências · 7

• http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5003822.html · Aviso do Fabricante
• http://secunia.com/advisories/25160 · Nota
• http://vupen.com/english/advisories/2007/1436 · Nota
• http://osvdb.org/35774 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2475 · Nota de Segurança
• http://securityfocus.com/bid/23547 · Nota
• http://securitytracker.com/id?1018006 · Nota