Novell iManager Tomcat Remote File Upload Vulnerability
RISK: Medium Risk
A vulnerability has been identified in Novell iManager, which could be exploited by remote attackers to take complete control of an affected system. This issue is caused by access and input validation errors in the "nps.jar" web application when handling uploaded files via the "getMultiPartParameters" function, which could allow remote unauthenticated attackers to upload malicious files to a vulnerable server and execute arbitrary code with the privileges of the affected service.
Impact
- Remote Code Execution
System / Technologies affected
- Novell iManager version 2.7.3.2 and prior
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
Upgrade to Novell iManager version 2.7.3 ftf3 or later :
http://download.novell.com
Vulnerability Identifier
- No CVE information is available
Source
Related Link
Share with