Off-by-one error in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allows remote attackers to cause a denial of service (daemon crash) via a long tree parameter in a login request to nps/servlet/webacc.
| Software | From | Fixed in |
|---|---|---|
| novell / imanager | 2.7.0 | 2.7.0.x |
| novell / imanager | 2.7.3 | 2.7.3.x |
| novell / imanager | 2.7.3-ftf2 | 2.7.3-ftf2.x |