Novell iManager is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers may exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely cause denial-of-service conditions. Novell iManager 2.7.2 and prior are vulnerable.

The vendor has released an advisory and fixes. Please see the references for details.

• http://www.novell.com/products/consoles/imanager/features.html
• http://www.novell.com/support/viewContent.do?externalId=7004985&sliceId=1
• http://www.securityfocus.com/bid/37672
• http://www.zerodayinitiative.com/advisories/ZDI-10-001/

---

Updated on 2015-03-25