Novell iChain Server Multiple Vulnerabilities

Bugtraq ID:	8140
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jul 07 2003 12:00AM
Updated:	Jul 07 2003 12:00AM
Credit:	This issue was announced by the vendor.
Vulnerable:	Novell iChain Server 2.2 FP1a Novell iChain Server 2.2 FP1 Novell iChain Server 2.2
Not Vulnerable:	Novell iChain Server 2.2 SP1

Novell iChain Server Multiple Vulnerabilities

Novell has reported that multiple vulnerabilities exist in Novell iChain Server 2.2 versions prior to Support Pack 1. These vulnerabilities could be exploited to gain unauthorized access to sensitive information or permit attackers to redirect clients to a malicious website.

Novell iChain Server Multiple Vulnerabilities

There is no exploit required for these issues.

Novell iChain Server Multiple Vulnerabilities

Solution:
The vendor has released Support Pack 1 to address these issues. Users should refer to the vendor's Technical Information Document for this release for specific upgrade details.


Novell iChain Server 2.2

• Novell ic22sp1.exe
  http://support.novell.com/servlet/filedownload/sec/pub/ic22sp1.exe

Novell iChain Server 2.2 FP1a

• Novell ic22sp1.exe
  http://support.novell.com/servlet/filedownload/sec/pub/ic22sp1.exe

Novell iChain Server 2.2 FP1

• Novell ic22sp1.exe
  http://support.novell.com/servlet/filedownload/sec/pub/ic22sp1.exe

Novell iChain Server Multiple Vulnerabilities

References:

• iChain 2.2 Support Pack 1 (Novell)