Are You Taking a Risk by Using Novell Access Manager?

Are you using Novell Access Manager for your business or other purposes related to job management? If so, you should prick up your ears. If you are not using it or moreover, you haven't heard about it, it should be interesting for you to get to know about this access management product. Novell Access Manager offers users the same experience with apps, whether they are inside or outside the firewall, meaning no matter where they are.

Bad news was reported regarding Novell Access Manager. A vulnerability has been discovered in this software program. Remote attackers with an aim to compromise a vulnerable system, could exploit this vulnerability and obtain unauthorized access to arbitrary files and sensitive information on the system.

The next question is what is the main reason for this particular vulnerability? This security issue is provoked by an unidentified input validation error in the Administration Console while loading libraries, which enables attackers to inject a malicious library and execute arbitrary code remotely.

Table 1.  Affected products 

Some of the features of Novell Access Manager might be similar to AOL Instant Messenger also known as AIM which is related to these files: IDLEMON.DLL, aimp_shell.dll, aimp2.exe, aimpro.exe and menu.dll.

Are you a current user of Novell Access Manager? Have you faced this specific vulnerability? If your answer is yes, there is a solution provided for you. What you should do is upgrade to Novell Access Manager version 3.1 SP1. It is a simple way to update your current version of Novell Access Manager and get rid of the vulnerability.