Approved changes feed: RSS · Atom

cpe:2.3:a:novell:imanager:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

VendorNovell (4a1c187d-e568-531f-92b0-685a3df2807c)
ProductImanager (cb2d046e-cd14-5e88-8822-30fac5840d93)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-4188 vulnerable 2026-06-08 04:59:29.817185 Details available
Buffer overflow in the Create Attribute function in jclient in Novell iManager 2.7.4 before patch 4 allows remote authenticated users to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted EnteredAttrName parameter, a related issue to CVE-2010-1929.
Published: 2012-04-09T20:00:00.000Z
Updated: 2024-08-07T00:01:51.006Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4486 vulnerable 2026-06-08 04:51:48.637217 Details available
Stack-based buffer overflow in the eDirectory plugin in Novell iManager before 2.7.3 allows remote attackers to execute arbitrary code via vectors that trigger long arguments to an unspecified sub-application, related to importing and exporting from a schema.
Published: 2010-01-08T18:00:00.000Z
Updated: 2024-08-07T07:01:20.927Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3488 vulnerable 2026-06-08 04:50:34.873907 Details available
Unspecified vulnerability in Novell iManager before 2.7 SP1 (2.7.1) allows remote attackers to delete Plug-in Studio created Property Book Pages via unknown vectors.
Published: 2008-08-06T17:05:00.000Z
Updated: 2024-08-07T09:37:27.026Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4517 vulnerable 2026-06-08 04:49:18.082601 Details available
Novell iManager 2.5 and 2.0.2 allows remote attackers to cause a denial of service (crash) in the Tomcat server via a long TREE parameter in an HTTP POST, which triggers a NULL pointer dereference.
Published: 2006-11-01T15:00:00.000Z
Updated: 2024-08-07T19:14:47.638Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0112 vulnerable 2026-06-08 04:47:48.576981 Details available
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.
Published: 2004-03-18T05:00:00.000Z
Updated: 2024-08-08T00:10:03.359Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0081 vulnerable 2026-06-08 04:47:48.457405 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0079 vulnerable 2026-06-08 04:47:48.362699 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.