PT-2002-2359 · Novell · Novell Netware

Published 2002-12-31 · Updated 2017-07-11 · CVE-2002-1634

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Novell NetWare version 5.1

Description The issue allows remote attackers to obtain sensitive information via various sample applications installed by Novell NetWare 5.1, including ndsobj.nlm, allfield.jse, websinfo.bas, ndslogin.pl, volscgi.pl, lancgi.pl, test.jse, and env.pl.

Recommendations For Novell NetWare version 5.1, consider removing or restricting access to the sample applications ndsobj.nlm, allfield.jse, websinfo.bas, ndslogin.pl, volscgi.pl, lancgi.pl, test.jse, and env.pl to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2002-1634

Affected Products

Novell Netware

References · 18

• 🔥 http://support.novell.com/cgi-bin/search/searchtid.cgi?/10064452.htm · Exploit
• 🔥 http://securityfocus.com/bid/4874 · Exploit
• 🔥 https://exploit-db.com/exploits/21488 · Exploit
• 🔥 http://securityfocus.com/advisories/4158 · Exploit
• 🔥 http://securityfocus.com/advisories/4157 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1634 · Security Note
• http://kb.cert.org/vuls/id/159203 · Patch
• http://osvdb.org/17467 · Note
• http://osvdb.org/17465 · Note
• http://osvdb.org/17461 · Note
• http://osvdb.org/17466 · Note
• http://procheckup.com/security_info/vuln_pr0201.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9212 · Note
• http://procheckup.com/security_info/vuln_pr0203.html · Note
• http://osvdb.org/17462 · Note