Novell eDirectory Expired Password Vulnerability

Bugtraq ID:	6163
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 12 2002 12:00AM
Updated:	Nov 12 2002 12:00AM
Credit:	Announced by Novell.
Vulnerable:	Novell eDirectory Database 85.30 + Novell Netware 5.1 SP4 + Novell Netware 5.1 Novell eDirectory Database 85.24 + Novell Netware 5.1 SP4 + Novell Netware 5.1 Novell eDirectory Database 85.20 + Novell Netware 5.1 SP4 + Novell Netware 5.1 Novell eDirectory 8.6.2
Not Vulnerable:

Novell eDirectory Expired Password Vulnerability

Novell has recently reported a vulnerability in eDirectory. According to Novell, inappropriate privileges may be applied to users logging in from Remote Manager. This occurs when the user's password has expired.

Novell eDirectory Expired Password Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.


Novell eDirectory 8.6.2

• Novell edir862sp2a.exe
  Applies to eDirectory 8.6.2 for Netware and NT/2000 platforms.
  http://support.novell.com/servlet/tidfinder/2963767

Novell eDirectory Database 85.20

• Novell fds8530.exe
  Applies to eDirectory Database 85.X on NetWare 5.1.
  http://support.novell.com/servlet/tidfinder/2963827

Novell eDirectory Database 85.24

• Novell fds8530.exe
  Applies to eDirectory Database 85.X on NetWare 5.1.
  http://support.novell.com/servlet/tidfinder/2963827

Novell eDirectory Database 85.30

• Novell fds8530.exe
  Applies to eDirectory Database 85.X on NetWare 5.1.
  http://support.novell.com/servlet/tidfinder/2963827

Novell eDirectory Expired Password Vulnerability

References: