Novell Identity Manager Client 'asampsp' Denial of Service Vulnerability

Bugtraq ID:	27028
Class:	Input Validation Error
CVE:	CVE-2007-6625
Remote:	Yes
Local:	No
Published:	Dec 21 2007 12:00AM
Updated:	May 07 2015 05:34PM
Credit:	The vendor reported this vulnerability.
Vulnerable:	Novell Identity Manager 3.5.1
Not Vulnerable:

Novell Identity Manager Client 'asampsp' Denial of Service Vulnerability

Novell Identity Manager client is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to crash the application. Given the nature of this issue, the attacker may be able to execute arbitrary code, but this has not been confirmed.

This issue affects Novell Identity Manager 3.5.1; other versions may also be vulnerable.

Novell Identity Manager Client 'asampsp' Denial of Service Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Novell Identity Manager Client 'asampsp' Denial of Service Vulnerability

Solution:
Novell released a patch to address this issue. Please see the references for more information.

Novell Identity Manager Client 'asampsp' Denial of Service Vulnerability

References:

• Novell Identity Manager (Novell)
  
• IDM 3.5.1 Fan-Out Driver Platform Receiver Patch 1 20071218 (Novell)