Novell IManager Tomcat Denial of Service Vulnerability

Bugtraq ID:	20841
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2006-4517
Remote:	Yes
Local:	No
Published:	Oct 31 2006 12:00AM
Updated:	Nov 02 2006 12:42AM
Credit:	CIRT.DK. is credited with discovering this vulnerability.
Vulnerable:	Novell iManager 2.5 Novell iManager 2.0.2 Novell iManager 2.0 Novell iManager 1.5
Not Vulnerable:	Novell iManager 2.6.0

Novell IManager Tomcat Denial of Service Vulnerability

Novell iManager Tomcat server is prone to a denial-of-service issue.

An attacker can exploit this issue to crash the affected server, denying service to legitimate users.

This issue affects version 2.5 and earlier.

Novell IManager Tomcat Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Novell IManager Tomcat Denial of Service Vulnerability

Solution:
The vendor has released an update to address this issue. Please contact the vendor for information on how to obtain and apply this update.

Novell IManager Tomcat Denial of Service Vulnerability

References:

• Product Home Page (Novell)
  
• iDefense Security Advisory 10.31.06: Novell iManager Tomcat DoS Vulnerability ([email protected])