CVE-2006-4517: Novell Imanager

High severity, CVSS 7.8. EPSS: 3.2% chance of exploitation in the next 30 days.

Novell iManager 2.5 and 2.0.2 allows remote attackers to cause a denial of service (crash) in the Tomcat server via a long TREE parameter in an HTTP POST, which triggers a NULL pointer dereference.

Affected products

• Novell Imanager: up to and including 2.5; version 1.5 only; version 2.0 only; version 2.0.2 only

Published 2006-11-01. Last modified 2026-06-16.