Novell NetWare Broker Information Disclosure Vulnerability
BID:8715
Info
Novell NetWare Broker Information Disclosure Vulnerability
| Bugtraq ID: | 8715 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 27 2003 12:00AM |
| Updated: | Sep 27 2003 12:00AM |
| Credit: | Announced by Novell. |
| Vulnerable: |
Novell Netware 6.0 SP3 Novell Netware 6.0 SP2 Novell Netware 6.0 SP1 Novell Netware 6.0 Novell Netware 5.1 SP6 Novell Netware 5.1 SP4 Novell Netware 5.1 |
| Not Vulnerable: |
Novell Netware 6.5 |
Discussion
Novell NetWare Broker Information Disclosure Vulnerability
Novell has reported that it is possible for unauthenticated clients to view information related to the NDPS Broker on a webserver that may be installed by default. Novell has stated that this is a low risk security issue. This information may be of use to attackers to launch more sophisticated attacks. The vendor has stated that NetWare NetWare 6 and NetWare 5.1 are affected. NetWare 6.5 is not vulnerable. Additional technical details are not known at this time.
Novell has reported that it is possible for unauthenticated clients to view information related to the NDPS Broker on a webserver that may be installed by default. Novell has stated that this is a low risk security issue. This information may be of use to attackers to launch more sophisticated attacks. The vendor has stated that NetWare NetWare 6 and NetWare 5.1 are affected. NetWare 6.5 is not vulnerable. Additional technical details are not known at this time.