CVE-2005-0744 The web GUI for Novell iChain 2.2 and 2.3 SP2 and SP3 allows attackers to hijack sessions and gain administrator privileges by (1) sniffing the connection on TCP port 51100 and replaying the authentic...
HighCVSS 10.0
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The web GUI for Novell iChain 2.2 and 2.3 SP2 and SP3 allows attackers to hijack sessions and gain administrator privileges by (1) sniffing the connection on TCP port 51100 and replaying the authentication information or (2) obtaining and replaying the PCZQX02 authentication cookie from the browser.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell ichain | = 2.2 | No fix listed |
| novell ichain | = 2.3 | No fix listed |
References
- 14527 patch third-party-advisory vendor-advisory
- 1013406 vdb-entry
- support.novell.com patch
- ichain-gain-access(19646) vdb-entry