Novell Sentinel Log Manager

ソフト名：Novell Sentinel Log Manager 1.2.0.1未満 (Sun JAVA, Apache Tomcat 6.x/7.x)

回避策：アップデートにて対応

脆弱性：セキュリティ制限の回避, XSS, DoS攻撃, 無限ループ, キャッシュ汚染, 不正HTMLの実行, スクリプトコード実行, アウトオブメモリ

ソース：http://www.novell.com/products/sentinel-log-manager/

http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5098550.html

http://secunia.com/advisories/42337/

http://secunia.com/advisories/43194/

http://secunia.com/advisories/43262/

http://secunia.com/advisories/45022/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3718

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4172

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4476

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0013

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0534

CVE：CVE-2010-3718, CVE-2010-4172, CVE-2010-4476, CVE-2011-0013, CVE-2011-0534

危険性：Medium Risk

Novell Sentinel Log Manager

ソフト名：Novell Sentinel Log Manager 1.0.0.5/1.1
回避策：未対応
脆弱性：機密情報の奪取, DoS攻撃
ソース：http://www.novell.com/products/sentinel-log-manager/
http://www.novell.com/support/viewContent.do?externalId=7007274
http://www.novell.com/support/viewContent.do?externalId=7007275
http://secunia.com/advisories/39574/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2227
CVE：CVE-2010-2227
危険性：Low Risk

Novell Sentinel Log Manager

ソフト名：Novell Sentinel Log Manager 1.1
回避策：Novell Document ID: 5078470にて対応
脆弱性：リモートコード実行
ソース：http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5078470.html
http://www.zerodayinitiative.com/advisories/ZDI-10-143/
http://secunia.com/advisories/40711
危険性：High Risk

Novell Sentinel Log Manager

ソフト名：Novell Sentinel Log Manager 1.1
回避策：Novell Document ID: 5078470にて対応
脆弱性：ファイル操作
ソース：http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5078470.html
http://secunia.com/advisories/40711
http://www.vupen.com/english/advisories/2010/2036
危険性：Low Risk