CVE-2006-4517

Severity CVSS v4.0:
Pending analysis
Type:
CWE-189 Numeric Errors
Publication date:
01/11/2006
Last modified:
09/04/2025

Description

Novell iManager 2.5 and 2.0.2 allows remote attackers to cause a denial of service (crash) in the Tomcat server via a long TREE parameter in an HTTP POST, which triggers a NULL pointer dereference.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:novell:imanager:*:*:*:*:*:*:*:* 2.5 (including)
cpe:2.3:a:novell:imanager:1.5:*:*:*:*:*:*:*
cpe:2.3:a:novell:imanager:2.0:*:*:*:*:*:*:*
cpe:2.3:a:novell:imanager:2.0.2:*:*:*:*:*:*:*