Test ID:	1.3.6.1.4.1.25623.1.0.805269
Category:	Web application abuses
Title:	Novell eDirectory iMonitor Multiple Vulnerabilities (Feb 2015)
Summary:	Novell eDirectory is prone to multiple vulnerabilities.
Description:	Summary: Novell eDirectory is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - Improper sanitization by the /nds/search/data script when input is passed via the 'rdn' parameter. - An error in the /nds/files/opt/novell/eDirectory/lib64/ndsimon/public/images. Vulnerability Impact: Successful exploitation will allow attackers to execute arbitrary script code in a user's browser session within the trust relationship between their browser and the server, and disclose virtual memory including passwords. Affected Software/OS: Novell eDirectory prior to version 8.8 SP8 Patch 4. Solution: Update to version 8.8 SP8 Patch 4 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-5212 Bugtraq: 20141219 SEC Consult SA-20141219-0 :: XSS & Memory Disclosure vulnerabilities in NetIQ eDirectory NDS iMonitor (Google Search) http://www.securityfocus.com/archive/1/534284 https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20141219-0_NetIQ_eDirectory_iMonitor_XSS_Memory_Disclosure_v10.txt http://www.securitytracker.com/id/1031408 Common Vulnerability Exposure (CVE) ID: CVE-2014-5213
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.