CVE-2008-5696 Novell NetWare 6.5 before Support Pack 8, when an OES2 Linux server is installed into the NDS tree, does not require a password for the ApacheAdmin console, which allows remote attackers to reconfigur...
HighCVSS 9.3
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Novell NetWare 6.5 before Support Pack 8, when an OES2 Linux server is installed into the NDS tree, does not require a password for the ApacheAdmin console, which allows remote attackers to reconfigure the Apache HTTP Server via console operations.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell netware | <= 6.5 | No fix listed |
| novell netware | = 6.5 | No fix listed |
| novell netware | = 6.5-sp1 | No fix listed |
| novell netware | = 6.5-sp1.1a | No fix listed |
| novell netware | = 6.5-sp1.1b | No fix listed |
| novell netware | = 6.5-sp2 | No fix listed |
| novell netware | = 6.5-sp3 | No fix listed |
| novell netware | = 6.5-sp4 | No fix listed |
| novell netware | = 6.5-sp5 | No fix listed |
| novell netware | = 6.5-sp6 | No fix listed |
References
- 32989 third-party-advisory vendor-advisory
- www.novell.com
- 32657 vdb-entry
- 1021350 vdb-entry
- ADV-2008-3368 vdb-entry
- netware-apacheadmin-security-bypass(47104) vdb-entry