PT-2002-2359 · Novell · Novell Netware

Publicado 2002-12-31 · Atualizado 2017-07-11 · CVE-2002-1634

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Novell NetWare version 5.1

Description The issue allows remote attackers to obtain sensitive information via various sample applications installed by Novell NetWare 5.1, including ndsobj.nlm, allfield.jse, websinfo.bas, ndslogin.pl, volscgi.pl, lancgi.pl, test.jse, and env.pl.

Recommendations For Novell NetWare version 5.1, consider removing or restricting access to the sample applications ndsobj.nlm, allfield.jse, websinfo.bas, ndslogin.pl, volscgi.pl, lancgi.pl, test.jse, and env.pl to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2002-1634

Produtos afetados

Novell Netware

Referências · 18

• 🔥 http://support.novell.com/cgi-bin/search/searchtid.cgi?/10064452.htm · Exploit
• 🔥 http://securityfocus.com/bid/4874 · Exploit
• 🔥 https://exploit-db.com/exploits/21488 · Exploit
• 🔥 http://securityfocus.com/advisories/4158 · Exploit
• 🔥 http://securityfocus.com/advisories/4157 · Exploit
• http://osvdb.org/17467 · Nota
• http://osvdb.org/17465 · Nota
• http://osvdb.org/17461 · Nota
• http://osvdb.org/17466 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1634 · Nota de Segurança
• http://kb.cert.org/vuls/id/159203 · Correção
• http://procheckup.com/security_info/vuln_pr0201.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9212 · Nota
• http://procheckup.com/security_info/vuln_pr0203.html · Nota
• http://osvdb.org/17462 · Nota