Description
ACLCHECK module in Novell iChain 2.3 allows attackers to bypass access control rules of an unspecified component via an unspecified attack vector involving a string that contains escape sequences represented with "overlong UTF-8 encoding."
References
- 1011074 vdb-entry
- http://support.novell.com/cgi-bin/search/searchtid.cgi?2972080.htm
- 9266 vdb-entry
- ichain-access-control-bypass(17132) vdb-entry
- 11061 vdb-entry
- 12366 third-party-advisory