Novell XTier Framework HTTP Header Remote Integer Overflow Vulnerability

Bugtraq ID:	50363
Class:	Boundary Condition Error
CVE:	CVE-2011-1710
Remote:	Yes
Local:	No
Published:	Oct 25 2011 12:00AM
Updated:	Nov 15 2011 12:51AM
Credit:	Novell
Vulnerable:	SuSE SUSE Linux Enterprise Server 11 SP1 + Linux kernel 2.6.5 Novell XTier Framework 0
Not Vulnerable:

Novell XTier Framework HTTP Header Remote Integer Overflow Vulnerability

Novell XTier is prone to a remote integer-overflow vulnerability because it fails to properly validate user-supplied input.

Exploiting this vulnerability may allow remote attackers to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Novell XTier Framework HTTP Header Remote Integer Overflow Vulnerability

Currently, we are not aware of any vendor supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Novell XTier Framework HTTP Header Remote Integer Overflow Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Novell XTier Framework HTTP Header Remote Integer Overflow Vulnerability

References:

• Novell Homepage (Novell)