CVE-2009-4486

{"id": "CVE-2009-4486", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-01-08T18:30:00.353", "references": [{"url": "http://osvdb.org/61584", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/38030", "source": "cve@mitre.org"}, {"url": "http://www.novell.com/support/viewContent.do?externalId=7004985&sliceId=1", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/37672", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2010/0074", "source": "cve@mitre.org"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-10-001/", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55468", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/61584", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/38030", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.novell.com/support/viewContent.do?externalId=7004985&sliceId=1", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/37672", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2010/0074", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-10-001/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55468", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in the eDirectory plugin in Novell iManager before 2.7.3 allows remote attackers to execute arbitrary code via vectors that trigger long arguments to an unspecified sub-application, related to importing and exporting from a schema."}, {"lang": "es", "value": "Desbordamiento del b\u00fafer de la pila en el plugin eDirectory en Novell iManager anterior a v2.7.3 permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de vectores que provoca argumentos largos para una sub-aplicaci\u00f3n sin especificar, relacionado con la importaci\u00f3n y exportaci\u00f3n de un esquema."}], "lastModified": "2024-11-21T01:09:45.510", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:novell:imanager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BD37491E-24B8-4DE3-91C2-390BAF6E18F2", "versionEndIncluding": "2.7.2"}, {"criteria": "cpe:2.3:a:novell:imanager:1.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "166BF638-ABDC-4BB9-BD4E-2B22681AD9CC"}, {"criteria": "cpe:2.3:a:novell:imanager:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8FA6420B-9F6A-48F4-A445-12B60A320347"}, {"criteria": "cpe:2.3:a:novell:imanager:2.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83287853-0215-4B83-BF57-D1AEB247FB38"}, {"criteria": "cpe:2.3:a:novell:imanager:2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52BE3EE2-E5C2-4C82-BA81-1E0B0D7C5F46"}, {"criteria": "cpe:2.3:a:novell:imanager:2.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BC7879DA-7878-461B-BCA5-2232C6F9CCD3"}, {"criteria": "cpe:2.3:a:novell:imanager:2.7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87E03D12-D745-4071-A309-3E2DD2CC5BE7"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}