Novell issues support pack for iChain

Secunia Advisories reports that Novell has issued a support pack for iChain. This fixes the following vulnerabilities, which can be exploited by malicious people to hijack another user's session, cause a DoS (Denial of Service) and maybe compromise a system.

1) A user can hijack another user's session if the new user's session is opened on the same port.
2) The server can be crashed by using WGET.
3) iChain is affected by the OpenSSL vulnerabilities in the ASN.1 parsing.

View the original Novell advisory at http://support.novell.com/cgi-bin/search/searchtid.cgi?/2967175.htm

More about: CGI, Novell

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
Users posting comments agree to the Computerworld comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Related Whitepapers
Latest Stories
Community Comments
Whitepapers
All whitepapers
Sign up now to get free exclusive access to reports, research and invitation only events.
Featured Download
/downloads/product/161/softdisc/

SoftDisc

SoftDisc is an image file tool that allows you to create, edit and manage your image files. It also lets you emulate a virtual CD ...

HP and IDG news, product videos and resources

Computerworld newsletter

Join the most dedicated community for IT managers, leaders and professionals in Australia