CVE-2006-4517: novell imanager Numeric Errors
CVSS: 7.8v2.0HighModified
Published 01-11-2006Last modified 07-08-2024
Vulnerability summary
CVE-2006-4517 is a high (CVSS 7.8) Numeric Errors vulnerability in novell imanager. EPSS estimates a 3.24% chance of exploitation in the next 30 days, higher than 88.1% of scored vulnerabilities.
CVSS score
7.8/10
010
High · v2.0 (NVD)EPSS score
3.24%
0%100%
Low · +0.07 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 01-11-2006PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Novell iManager 2.5 and 2.0.2 allows remote attackers to cause a denial of service (crash) in the Tomcat server via a long TREE parameter in an HTTP POST, which triggers a NULL pointer dereference.
CVSS metrics
1 score · 1 source · 1 versionHigh 7.8Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:N/I:N/A:CSourcesSingle source
EPSS trend
Probability
3.24%
Chance of exploitation in the next 30 days
Percentile
88%
Versus all other CVEs
30-day change
+0.07 pp
From 3.17% on 18-09-2026
18-09-202618-10-2026
EPSS score3.24%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Novell1 product
- imanager≤ 2.5 | 1.5 | 2.0 | 2.0.2
1 vendor · 1 product
References
7 links- labs.idefense.com/intelligence/vulnerabilities/display.php?id=436Third Party AdvisoryX Refsource IDEFENSEPatch