Novell iChain Multiple Unspecified Potential Vulnerabilities

Bugtraq ID:	10767
Class:	Unknown
CVE:
Remote:	Yes
Local:	Unknown
Published:	Jul 21 2004 12:00AM
Updated:	Jul 21 2004 12:00AM
Credit:	These issues were disclosed by the vendor.
Vulnerable:	Novell iChain Server 2.2 SP2
Not Vulnerable:	Novell iChain Server 2.2 SP3

Novell iChain Multiple Unspecified Potential Vulnerabilities

Novell iChain Server is a web-based security product designed to implement and maintain various network-based access controls. iChain implements a web server with limited functionality.

Novell has released iChain Server Support Pack 3. This release includes fixes for various issues that may pose a security threat. It is not confirmed whether these issues are security related or can be exploited successfully. Some of these issues may allow an attacker to carry out denial of service and information disclosure attacks against a vulnerable server.

Due to a lack of details, further information is not currently available. This BID will be updated as more information becomes available.

Novell iChain Multiple Unspecified Potential Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Novell iChain Multiple Unspecified Potential Vulnerabilities

Solution:
Novell has released Technical Information Document TID2969313 that includes more information about iChain 2.2 Support Pack 3. Please see the document in web references for more information.

Novell iChain Multiple Unspecified Potential Vulnerabilities

References:

• iChain 2.2 Support Pack 3 - TID2969313 (Novell)
  
• iChain Homepage (Novell)