Description
Novell Access Management 3 SSLVPN Server allows remote authenticated users to bypass VPN restrictions by making policy.txt read-only, disconnecting, then manually modifying policy.txt.
References
- 33841 vdb-entry
- https://secure-support.novell.com/KanisaPlatform/Publishing/648/3429077_f.SAL_Public.html
- ADV-2007-0800 vdb-entry
- 24369 third-party-advisory
- 1017722 vdb-entry