CVE-2010-1929

Description

Multiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20 function in jclient.dll in the Tomcat web server in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allow remote authenticated users to execute arbitrary code via the (1) EnteredClassID or (2) NewClassName parameter to nps/servlet/webacc.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/59694

http://www.vupen.com/english/advisories/2010/1575

http://www.securityfocus.com/archive/1/511983/100/0/threaded

http://www.osvdb.org/65737

http://secunia.com/advisories/40281

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3