>> Novell SecureLogin "adschema" Utility and AD Password Modification Security Issues
Title : Novell SecureLogin "adschema" Utility and AD Password Modification Security Issues VUPEN ID : VUPEN/ADV-2007-1436 CVE ID : CVE-2007-2475 - CVE-2007-2476
Rated as : Moderate Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2007-04-18
Technical Description
Two vulnerabilities have been identified in Novell SecureLogin, which could be exploited by attackers to bypass security restrictions and potentially obtain elevated privileges.
The first issue is caused by an error in the "ADSCHEMA" utility that grants users excess permissions to their own attributes. No further details have been disclosed.
The second vulnerability is caused by an error within the Active Directory (AD) password change feature. No further details have been disclosed.
