PT-2007-3799 · Novell · Novell Securelogin

Published 2007-05-02 · Updated 2011-03-08 · CVE-2007-2475

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Novell SecureLogin versions prior to 6.0.106

Description The issue is related to an unspecified vulnerability in the ADSCHEMA utility, which can grant users excess permissions to their own attributes. This vulnerability has unknown impact and can be exploited remotely.

Recommendations For versions prior to 6.0.106, update to version 6.0.106 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-2475

Affected Products

Novell Securelogin

References · 7

• http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5003822.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2475 · Security Note
• http://secunia.com/advisories/25160 · Note
• http://vupen.com/english/advisories/2007/1436 · Note
• http://osvdb.org/35774 · Note
• http://securityfocus.com/bid/23547 · Note
• http://securitytracker.com/id?1018006 · Note