PT-2016-6672 · Novell · Novell Open Enterprise Server

Published 2016-11-15 · Updated 2016-11-28 · CVE-2016-5763

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Novell Open Enterprise Server versions prior to OES2015 SP1 Scheduled Maintenance Update 10992 Novell Open Enterprise Server versions prior to OES2015 Scheduled Maintenance Update 10990 Novell Open Enterprise Server versions prior to OES11 SP3 Scheduled Maintenance Update 10991 Novell Open Enterprise Server versions prior to OES11 SP2 Scheduled Maintenance Update 10989

Description The issue might allow authenticated remote attackers to perform unauthorized file access and modification.

Recommendations For OES2015 SP1, apply Scheduled Maintenance Update 10992 to resolve the issue. For OES2015, apply Scheduled Maintenance Update 10990 to resolve the issue. For OES11 SP3, apply Scheduled Maintenance Update 10991 to resolve the issue. For OES11 SP2, apply Scheduled Maintenance Update 10989 to resolve the issue.

Fix

Weakness Enumeration

CWE-254

Related Identifiers

CVE-2016-5763

Affected Products

Novell Open Enterprise Server

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2016-5763 · Security Note
• http://download.novell.com/Download?buildid=dfqmrymc0Rg~ · Note
• http://securityfocus.com/bid/94348 · Note
• http://download.novell.com/Download?buildid=3Ho1yp5JOXA~ · Note
• http://download.novell.com/Download?buildid=s9_RxhgC8KU~ · Note
• http://download.novell.com/Download?buildid=Fj0Hdns7mxA~ · Note