PT-2003-1285 · Novell · Netware+2

Published 2003-03-31 · Updated 2017-10-10 · CVE-2002-1552

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Novell eDirectory (eDir) version 8.6.2 Netware 5.1 eDir version 85.x

Description The issue allows users with expired passwords to gain inappropriate permissions when logging in from Remote Manager.

Recommendations For Novell eDirectory (eDir) version 8.6.2, update the password management settings to prevent users with expired passwords from gaining elevated permissions. For Netware 5.1 eDir version 85.x, modify the authentication process in Remote Manager to properly handle expired passwords and restrict inappropriate permissions.

Fix

Related Identifiers

CVE-2002-1552

Affected Products

Netware

Novell Edirectory

Remote Manager

References · 5

• http://securityfocus.com/bid/6163 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1552 · Security Note
• http://marc.info/?l=bugtraq&m=103712498905027&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10604 · Note
• http://marc.info/?l=bugtraq&m=103712790808781&w=2 · Note