Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

XTier: code execution

Package(s):

Novell XTier framework

CVE #(s):

CVE-2011-1710

Created:

October 26, 2011

Updated:

October 26, 2011

Description:

From the SUSE advisory:

Several user supplied header length variables for the HTTP server component in the Novell XTier framework were not size limited, allowing integer overflow attacks to crash the service or potentially execute code.

Alerts:

SUSE

SUSE-SU-2011:1185-1

2011-10-26

(Log in to post comments)