abeNd.org - [SA45845] Novell Cloud Manager RPC Session Initialization Security Bypass

User Functions
Username: Password: Don't have an account yet? Sign up as a New User Lost your password?

What's New
STORIES No new stories COMMENTS last 2 days No new comments TRACKBACKS last 2 days No new trackback comments LINKS last 2 weeks No recent new links

Who's Online
Guest Users: 7

Live Novell Chat
Live Novell Chat

Topics
Home Poll posts (1/0) Way Off Topic! (1/0) Contracting (2/0) FAQ (1/0) NetWare (51/0) Certification (32/0) NDS/eDir (20/0) Administration (78/0) GroupWise (146/0) Linux/Open Source (311/0) Resources (21/0) General News (911/0) Security (296/0)

Poll
Have you deployed ZCM 11 SP2 yet? Yes - on Linux Yes - on Windows Yes - with the .OVA No - just waiting a week No - still on ZCM 10 No - still on ZenWorks 7 No - still on ZenWorks 6 or earlier No - not a ZenWorks user Results 16 votes \| 0 comments

Microsoft Security

[SA45845] Novell Cloud Manager RPC Session Initialization Security Bypass

Author:	kkbass
Dated:	Tuesday, September 06 2011 @ 03:10 AM CDT
Viewed:	543 times

SECUNIA ADVISORY ID:
SA45845

VERIFY ADVISORY:
Secunia.com
http://secunia.com/advisories/45845/
Customer Area (Credentials Required)
https://ca.secunia.com/?page=viewadvisory&vuln_id=45845

RELEASE DATE:
2011-09-06

DISCUSS ADVISORY:
http://secunia.com/advisories/45845/#comments

DESCRIPTION:
A vulnerability has been reported in Novell Cloud Manager, which can
be exploited by malicious people to bypass certain security
restrictions.

The vulnerability is caused due to an error when initializing an
object for a RPC method resulting in a partially initialized session.
This can be exploited to execute privileged RPC calls.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in versions 1.1, 1.1.1, and 1.1.2.

SOLUTION:
Update to version 1.1.2 patch 3.

Further details available in Customer Area:
http://secunia.com/vulnerability_intelligence/

PROVIDED AND/OR DISCOVERED BY:
1c239c43f521145fa8385d64a9c32243 via ZDI.

ORIGINAL ADVISORY:
http://www.zerodayinitiative.com/advisories/ZDI-11-278/

What's Related
http://secunia.com/advi... https://ca.secunia.com/... http://secunia.com/advi... http://secunia.com/vuln... http://www.zerodayiniti... More by kkbass More from Security

Story Options
Mail Story to a Friend Printable Story Format

Trackback

Trackback URL for this entry: http://www.abend.org/trackback.php/20110905221019494

Here's what others have to say about '[SA45845] Novell Cloud Manager RPC Session Initialization Security Bypass':

OpenSUSE is Still Marginal | Techrights
Tracked on Monday, September 12 2011 @ 06:27 PM CDT

[SA45845] Novell Cloud Manager RPC Session Initialization Security Bypass | 0 comments | Create New Account

The following comments are owned by whomever posted them. This site is not responsible for what they say.

Welcome to abeNd.org - Novell News for IT Professionals Friday, May 18 2012 @ 04:21 AM CDT

Trackback