CVE-2010-1929

CVE-2010-1929 describes multiple stack-based buffer overflows in the jclient.dll component of Novell iManager versions 2.7, 2.7.3, and 2.7.3 FTF2. This vulnerability allows remote authenticated users to execute arbitrary code by manipulating the EnteredClassID or NewClassName parameters when interacting with the nps/servlet/webacc servlet. With a CVSS score of 9.0, it is considered critical due to its network attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation in the wild or inclusion in the KEV catalog, public exploit code exists via ExploitDB, though it has received minimal community discussion or media coverage.