1. Home
  2. CVE Database
  3. CVE-2003-0636
HIGH · 7.5

CVE-2003-0636

Novell iChain 2.2 before Support Pack 1 does not properly verify that URL redirects match the DNS name of an accelerator, which allows attackers to redirect URLs to malicious web sites.

Vulnerability Description

Novell iChain 2.2 before Support Pack 1 does not properly verify that URL redirects match the DNS name of an accelerator, which allows attackers to redirect URLs to malicious web sites.

CVSS Score

7.5

HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL

Affected Products

VendorProductVersions
NovellIchain2.2

References

FAQ

What is CVE-2003-0636?

CVE-2003-0636 is a vulnerability with a CVSS score of 7.5 (HIGH). Novell iChain 2.2 before Support Pack 1 does not properly verify that URL redirects match the DNS name of an accelerator, which allows attackers to redirect URLs to malicious web sites.

How severe is CVE-2003-0636?

CVE-2003-0636 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2003-0636?

Check the references section above for vendor advisories and patch information. Affected products include: Novell Ichain.