CVE-2004-2582: Novell iChain 2.3 includes the build number in the VIA line of the proxy server's HTTP headers, which allow...

Security readout for executives and security teams

Novell iChain 2.3 can reveal its internal build number in the proxy server Via HTTP header. This is mainly an information disclosure issue: by itself, the source bundle does not show system compromise, data theft, or service disruption. It can still help attackers fingerprint old infrastructure for later targeting. Exposure is most likely where legacy Novell iChain 2.3 proxy infrastructure remains reachable by external or untrusted clients. Organizations without iChain deployments are not exposed based on the provided sources. Treat this as a low-severity legacy exposure cleanup item unless iChain 2.3 is internet-facing or part of a sensitive access path. The business risk is attacker reconnaissance, not a confirmed direct compromise path. Mitigation focus: Check Novell support guidance for vendor-approved remediation or configuration advice.; Inventory and retire unsupported Novell iChain 2.3 deployments where feasible.; Limit access to any remaining iChain proxies to trusted networks..

Prepared

Jun 29, 2026, 16:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.