Novell SecureLogin Security Bypass And Privilege Escalation Vulnerability

Bugtraq ID:	23547
Class:	Unknown
CVE:	CVE-2007-2475 CVE-2007-2476
Remote:	Yes
Local:	No
Published:	Apr 18 2007 12:00AM
Updated:	May 08 2007 03:59PM
Credit:	The vendor reported these issues.
Vulnerable:	Novell SecureLogin 6.01 Novell SecureLogin 6.0
Not Vulnerable:	Novell SecureLogin 6.0.106

Novell SecureLogin Security Bypass And Privilege Escalation Vulnerability

Novell SecureLogin is prone to a vulnerability that allows attackers to bypass security restrictions as well as a vulnerability that may allow attackers to gain elevated privileges on the affected computer.

These issues affect Novell Access Management Server 3 IR1.

Novell SecureLogin Security Bypass And Privilege Escalation Vulnerability

Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Novell SecureLogin Security Bypass And Privilege Escalation Vulnerability

Solution:
The vendor has released an update to address these issues. Please see the references for more information.

Novell SecureLogin Security Bypass And Privilege Escalation Vulnerability

References:

• Novell SecureLogin (Novell)
  
• NSL 6.0.106 patch build 6.0.106 6.0.106 (Novell)