CVE-2010-1929

{"id": "CVE-2010-1929", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-06-28T17:30:01.077", "references": [{"url": "http://secunia.com/advisories/40281", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1024152", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.coresecurity.com/content/novell-imanager-buffer-overflow-off-by-one-vulnerabilities", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.exploit-db.com/exploits/14010", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/65737", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/511983/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/40480", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2010/1575", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59694", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Multiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20 function in jclient.dll in the Tomcat web server in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allow remote authenticated users to execute arbitrary code via the (1) EnteredClassID or (2) NewClassName parameter to nps/servlet/webacc."}, {"lang": "es", "value": "M\u00faltiple desbordamiento de b\u00fafer basado en pila en la funci\u00f3n jclient._Java_novell_jclient_JClient_defineClass@20 en jclient.dll en servidor Web Tomcat en Novell iManager v2.7, v2.7.3, y v2.7.3 FTF2 permite a usuarios autenticados remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de lso par\u00e1metros (1) EnteredClassID o (2) NewClassName sobre nps/servlet/webacc."}], "lastModified": "2018-10-10T19:58:01.077", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:novell:imanager:2.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C8E5445B-A87D-44D8-BB24-592FB78ADEC3"}, {"criteria": "cpe:2.3:a:novell:imanager:2.7.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "50360B96-A5EB-48BE-A6B5-DE7D3ECA3CFB"}, {"criteria": "cpe:2.3:a:novell:imanager:2.7.3:ftf2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "01F00C86-B0C3-4C7D-855F-466F63153712"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}