PT-2008-6748 · Novell+1 · Oes2 Linux+2

Published 2008-12-19 · Updated 2017-08-08 · CVE-2008-5696

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell NetWare versions 6.5 before Support Pack 8

Description The issue allows remote attackers to reconfigure the Apache HTTP Server via console operations because no password is required for the ApacheAdmin console when an OES2 Linux server is installed into the NDS tree.

Recommendations For Novell NetWare versions 6.5 before Support Pack 8, apply Support Pack 8 to address the issue.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2008-5696

Affected Products

Apache Http Server

Novell Netware

Oes2 Linux

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2008-5696 · Security Note
• http://secunia.com/advisories/32989 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47104 · Note
• http://vupen.com/english/advisories/2008/3368 · Note
• http://novell.com/support/viewContent.do?externalId=7001907 · Note
• http://securityfocus.com/bid/32657 · Note
• http://securitytracker.com/id?1021350 · Note