Further Information

ESB-2007.0509 -- [Win][Netware][UNIX/Linux][OSX] -- Mulitple vulnerabilities in Adobe products - (11/07/2007)

AA-2007.0044 -- [Netware] -- Novell release patches for denial of service vulnerability in NetWare NFS Server - (19/06/2007)

AA-2007.0043 -- [Win][Netware][UNIX/Linux] -- Novell Modular Authentication Service potential information disclosure vulnerability - (19/06/2007)

AL-2007.0072 -- [Win][Netware][UNIX/Linux] -- CA multiple products - critical vulnerabilities in anti-virus scan engine - Multiple products based on the CA Anti-Virus engine have two critical vulnerabilities when scanning .CAB files. (13/06/2007)

AA-2007.0040 -- [Netware] -- Novell NetWare FTP Server access control vulnerability - The NetWare FTP Server NWFTPD.NLM may not correctly apply access control restrictions to users. (05/06/2007)

AA-2007.0038 -- [Win][Linux][OSX] -- Novell GroupWise clients authentication vulnerability - An unauthenticated attacker may steal users' authentication credentials. (05/06/2007)

ESB-2007.0314 -- [Netware] -- Novell NetMail NMDMC Buffer Overflow Vulnerability - (11/05/2007)

AA-2007.0029 -- [Win][UNIX/Linux] -- APSB07-10 - Patch Available for RoboHelp Cross-Site Scripting Issue - (10/05/2007)

ESB-2007.0274 -- [Win][Netware][UNIX/Linux] -- Novell eDirectory NCP Fragment Denial of Service Vulnerability - (27/04/2007)

ESB-2007.0253 -- [Win][Netware][Linux] -- Novell Groupwise WebAccess Base64 Decoding Stack Overflow Vulnerability - A buffer overflow vulnerability in handling authentication requests allows an unauthenticated attacker to compromise the server remotely. (19/04/2007)

ESB-2007.0150 -- [Win][Linux][Netware] -- Novell Netmail WebAdmin Buffer Overflow Vulnerability - A remote attacker may compromise the server by sending a long username to the NetMail web admin interface on TCP port 89. (08/03/2007)

AA-2007.0007 -- [Win][Netware][UNIX/Linux] -- Novell Identity Manager User Application affected by remote vulnerability in JBoss - The User Application service installed with Identity Manager 3.0 and 3.0.1 SP1 deployments may be affected by the JBoss vulnerability reported previously in AusCERT ESB-2006.0866. (13/02/2007)

ESB-2006.0945 -- [Netware] -- Multiple vulnerabilities in Novell NetMail - (27/12/2006)

AA-2006.0101 -- [Netware] -- Potential XSS security vulnerability in Netware Welcome web-app - (22/12/2006)

ESB-2006.0925 -- [Win][Netware][UNIX/Linux] -- Vulnerability found in: IBM WebSphere Host On-Demand (HOD) - (19/12/2006)

ESB-2006.0913 -- [Win][Netware][UNIX/Linux] -- Sophos Anti-Virus CPIO and SIT Archive Parsing Buffer Overflow Vulnerabilities - (14/12/2006)

AL-2006.0120 -- [Win][UNIX/Linux][Netware] -- CA ARCserve Backup and Protection Suite products - multiple remote vulnerabilities - Several CA products are vulnerable to remote compromise via format string and buffer overflow vulnerabilities. (11/12/2006)

AL-2006.0114 -- [Netware] -- Novell Netware Client Print Provider Buffer Overflow Vulnerability - A vulnerability in Novell Netware Client Print Provider allows remote attackers to execute arbitrary code. (30/11/2006)

ESB-2006.0799 -- [Win][UNIX/Linux] -- Novell iManager Tomcat DoS Vulnerability - (02/11/2006)

ESB-2006.0795 -- [Win][UNIX/Linux] -- Novell eDirectory NMAS BerDecodeLoginDataRequeset DoS Vulnerability - (01/11/2006)

AL-2006.0096 -- [Win][Linux][HP-UX][Solaris][AIX] -- Novell eDirectory - three critical vulnerabilities allow remote compromise - Three critical vulnerabilities in eDirectory potentially allow a remote attacker to execute arbitrary code with root or Administrator privileges. (23/10/2006)

ESB-2006.0729 -- [Win][Linux][Novell] -- Novell GroupWise Messenger nmma.exe DoS Vulnerability - (04/10/2006)

AA-2006.0075 -- [Win][NetWare] -- Local administrator compromise vulnerabilities in multiple versions of Symantec AntiVirus - Format string vulnerabilities in Symantec AntiVirus Corporate Edition may allow a local user to gain administrative privileges. (18/09/2006)

AA-2006.0062 -- [UNIX/Linux][Win][NetWare] -- Novell eDirectory patch fixes vulnerabilities including denial of service - Issues fixed by this security patch include several potential denial of service vulnerabilities and other issues for which full details have not yet been disclosed. (18/08/2006)

ESB-2006.0587 -- [Win][Linux][NetWare] -- Symantec NetBackup PureDisk: Non-Privileged User Authentication Bypass - An unauthorized user with access to the network and the server hosting the management interface can potentially bypass the management interface authentication. (17/08/2006)

AA-2006.0057 -- [Win][Linux][NetWare] -- Novell GroupWise WebAccess cross-site scripting vulnerabilities - Novell GroupWise WebAccess version 7 SP1 and prior and GroupWise WebAccess version 6.5 Post SP6 Rev C and prior contain two cross-site scripting vulnerabilities. (11/08/2006)

AA-2006.0040 -- [Win][UNIX/Linux] -- CA eTrust Antivirus, PestPatrol and Integrated Threat Management format string vulnerability - A format string vulnerability allows any user who can submit a scan job to compromise the computer by supplying a specially crafted format string in the scan job description field. (30/06/2006)

ESB-2006.0434 -- [Win][Linux][NetWare] -- Novell Security Announcement Novell-SA:2006:001 - GroupWise - A security vulnerability exists in GroupWise allowing existing users to access the email of other people within the same post office. (29/06/2006)

AL-2006.0036 -- [Win][UNIX/Linux][Mac] -- Sophos multiple desktop and gateway AV products vulnerable to remote code execution scanning CAB files - An attacker may exploit this vulnerability to compromise gateways or desktop computers by sending a file or an email containing a malicious CAB file to computers protected by the vulnerable products. (09/05/2006)

ESB-2006.0305 -- Scripts in eBay Postings May Enable Phishing Attacks - A vulnerability in the eBay web site may allow an attacker to steal personal information from eBay customers. (28/04/2006)

ESB-2006.0221 -- [Win][Linux] -- Veritas Backup Exec: Application Memory Denial of Service - (22/03/2006)

AA-2006.0020 -- [NetWare][Win][Linux][Solaris] -- Novell iChain 2.3 SP3 IR1 released fixing vulnerabilities - (28/02/2006)

ESB-2006.0054 -- [Win][UNIX/Linux][Debian] -- New antiword packages fix insecure temporary file creation - (18/01/2006)

AU-2006.0004 -- AusCERT Update - [Win][UNIX/Linux] - Proof of concept code released for VERITAS NetBackup 5.x - (17/01/2006)

AA-2005.0030 -- Novell ZENworks -- Access control vulnerability allows regular users access to Remote Diagnostics - (24/11/2005)


Previous  1, 2, 3, 4, 5, 6  Next denotes AusCERT member only content.