NetIQ eDirectory 授权机制绕过漏洞
NetIQ eDirectory 授权机制绕过漏洞
发布日期:2012-12-24
更新日期:2012-12-27
受影响系统:
netiq eDirectory 8.8.7.x
netiq eDirectory 8.8.6.x
描述:
--------------------------------------------------------------------------------
CVE(CAN) ID: CVE-2012-0430
NetIQ eDirectory是一个LDAP目录。
NetIQ eDirectory 8.8.6.x、8.8.7.x内存在安全漏洞,可允许远程攻击者获取管理员cookie并绕过授权检查。
<*来源:Positive Research
链接:http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-0430
http://www.novell.com/support/kb/doc.php?id=3426981
http://www.novell.com/support/kb/doc.php?id=7011538
*>
建议:
--------------------------------------------------------------------------------
厂商补丁:
netiq
-----
netiq已经为此发布了一个安全公告(7011538)以及相应补丁:
7011538:Security Vulnerability: eDirectory Authorization Mechanism Bypass
链接:http://www.novell.com/support/kb/doc.php?id=7011538
补丁下载:
http://download.novell.com/
评论暂时关闭