CVE-2007-6625

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-01-04 · updated 2026-06-16
Weakness: CWE-134

Description

The Platform Service Process (asampsp) in Fan-Out Driver Platform Services for Novell Identity Manager (IDM) 3.5.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified network traffic that triggers a syslog message containing invalid format string specifiers, as demonstrated by a Nessus scan.

Affected products

Novell Identity Manager: 3.5.1

References

http://osvdb.org/40104
http://secunia.com/advisories/28237
http://securitytracker.com/id?1019144
http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5007560.html
http://www.securityfocus.com/bid/27028
http://www.vupen.com/english/advisories/2007/4311
https://exchange.xforce.ibmcloud.com/vulnerabilities/39206
http://osvdb.org/40104
http://secunia.com/advisories/28237
http://securitytracker.com/id?1019144
http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5007560.html
http://www.securityfocus.com/bid/27028

Get alerted when CVE-2007-6625 or the next vulnerability affects your stack