CVE-2010-1929

Multiple stack-based buffer overflows in the jclient._Java_novell_jclient_JClient_defineClass@20 function in jclient.dll in the Tomcat web server in Novell iManager 2.7, 2.7.3, and 2.7.3 FTF2 allow remote authenticated users to execute arbitrary code via the (1) EnteredClassID or (2) NewClassName parameter to nps/servlet/webacc.

• CWE-119

• http://secunia.com/advisories/40281Vendor Advisory
• http://securitytracker.com/id?1024152Exploit
• http://www.coresecurity.com/content/novell-imanager-buffer-overflow-off-by-one-vulnerabilitiesExploit
• http://www.exploit-db.com/exploits/14010Exploit
• http://www.osvdb.org/65737
• http://www.securityfocus.com/archive/1/511983/100/0/threaded
• http://www.securityfocus.com/bid/40480Exploit
• http://www.vupen.com/english/advisories/2010/1575Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59694
• http://secunia.com/advisories/40281Vendor Advisory
• http://securitytracker.com/id?1024152Exploit
• http://www.coresecurity.com/content/novell-imanager-buffer-overflow-off-by-one-vulnerabilitiesExploit
• http://www.exploit-db.com/exploits/14010Exploit
• http://www.osvdb.org/65737
• http://www.securityfocus.com/archive/1/511983/100/0/threaded
• http://www.securityfocus.com/bid/40480Exploit
• http://www.vupen.com/english/advisories/2010/1575Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59694

Published

Jun 28, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1923SQL injection vulnerability in user.php in Hi Web Wiesbaden …
• CVE-2010-1924SQL injection vulnerability in index.php in Hi Web Wiesbaden…
• CVE-2010-1925SQL injection vulnerability in makale.php in tekno.Portal 0.…
• CVE-2010-1926Directory traversal vulnerability in scr/soustab.php in open…
• CVE-2010-1927Multiple PHP remote file inclusion vulnerabilities in openMa…
• CVE-2010-1928Directory traversal vulnerability in scr/soustab.php in open…
• CVE-2010-1930Off-by-one error in Novell iManager 2.7, 2.7.3, and 2.7.3 FT…
• CVE-2010-1931SQL injection vulnerability in includes/content/cart.inc.php…
• CVE-2010-1932Heap-based buffer overflow in XnView 1.97.4 and possibly ear…
• CVE-2010-1934Multiple PHP remote file inclusion vulnerabilities in openMa…
• CVE-2010-1935Directory traversal vulnerability in scr/soustab.php in open…
• CVE-2010-1936Directory traversal vulnerability in scr/soustab.php in open…