Heap-based buffer overflow in Novell Open Enterprise Server Remote Manager (novell-nrm) in Novell SUSE Linux Enterprise Server 9 allows remote attackers to execute arbitrary code via an HTTP POST request with a negative Content-Length parameter.

The remote host is running Novell Remote Manager HTTP service for SuSE Enterprise or Open Enterprise Server.

The remote version of this software is vulnerable to a heap overflow attack that may be exploited by sending a negative value for the 'Content-Length' field. 

Since the 'httpstkd' service runs with the root privileges, an attacker can leverage this issue to gain full control of the remote host.

Detections

Analytics

CVE-2005-3655

critical

Tenable Plugins

high