PT-1999-1761 · Prosoft · Prosoft Netware Client

Publicado 1999-11-14 · Atualizado 2016-10-18 · CVE-1999-1528

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: ProSoft Netware Client version 5.12

Description: The issue concerns a situation where a user's NDS session remains unprotected after logging off the system, allowing other users of the same system to access the session. This occurs because the ProSoft Netware Client does not automatically log a user out of the NDS tree when the user logs off the system.

Recommendations: For ProSoft Netware Client version 5.12, consider implementing a manual logout procedure from the NDS tree when a user logs off the system to protect the NDS session from unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-1999-1528

Produtos afetados

Prosoft Netware Client

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-1999-1528 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=94261444428430&w=2 · Nota
• http://securityfocus.com/bid/794 · Aviso do Fabricante