CVE:CVE-2007-3570
CNNVD:CNNVD-200707-064
Novell Access Manager 3.0 SP1 Release Candidate 1 (RC1)版本之前的版本中的Linux Access Gateway允许远程攻击者可以借助在一个HTTP POST请求中把数据编码的Fullwidth/Halfwidth统一的字符编码标准，绕过未明安全控制。
solution:Upgrade novell access_manager to a higher version than 3,and avoid the version 3