Vulnerabilities of OES
OES vulnerability: hash collision
When the user has a password containing 8 bit characters, the Blowfish hashing algorithm of crypt() generates an invalid hash, which is potentially faster to find with a brute force.

OES vulnerability: two vulnerabilities of SWAT
An attacker can use two vulnerabilities of Samba Web Administration Tool, in order to create a Cross Site Request Forgery and a Cross Site Scripting.

OES vulnerability: denial of service via sCAL
An attacker can invite the victim to display a malicious PNG image, in order to generate a denial of service in applications linked to libpng.

OES vulnerability: several vulnerabilities
Several vulnerabilities of Java JRE/JDK can be used by a malicious applet/application in order to execute code or to obtain information. A legitimate applet/application, handling malicious data, can also be forced to execute code.

OES vulnerability: three vulnerabilities
Several vulnerabilities of Wireshark can be used by a remote attacker to create a denial of service or to execute code.

Display other vulnerabilities of OES described by Vigil@nce...

Display information about OES:

• http://www.novell.com/products/openenterpriseserver/