Novell SecureLogin Security Issue

FrSIRT Security has issued advisories concerning Novell's SecureLogin "adschema" Utility and AD Password Modification Security Issues.

"Two vulnerabilities have been identified in Novell SecureLogin, which could be exploited by attackers to bypass security restrictions and potentially obtain elevated privileges.

The first issue is caused by an error in the "ADSCHEMA" utility that grants users excess permissions to their own attributes. No further details have been disclosed.

The second vulnerability is caused by an error within the Active Directory (AD) password change feature. No further details have been disclosed."

Further information, and patching data, are avaulable from Novell.