PT-2007-3800 · Novell+1 · Novell Securelogin+1

Published 2007-05-02 · Updated 2011-03-08 · CVE-2007-2476

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell SecureLogin (NSL) versions prior to 6.0.106

Description The issue is related to Active Directory (AD) password changes and has remote attack vectors. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

Recommendations For versions prior to 6.0.106, update to version 6.0.106 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-2476

Affected Products

Active Directory

Novell Securelogin

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2007-2476 · Security Note
• http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5003822.html · Patch
• http://osvdb.org/35775 · Note
• http://securityfocus.com/bid/23547 · Note
• http://secunia.com/advisories/25160 · Note
• http://vupen.com/english/advisories/2007/1436 · Note
• http://securitytracker.com/id?1018006 · Note