Lucene search
HistoryAug 18, 2005 - 4:00 a.m.
CVE-2004-2414
cve-2004-2414
novell
netware
sensitive information
password disclosure
openssh
log files
local users
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.2 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
20.0%
Novell NetWare 6.5 SP 1.1, when installing or upgrading using the Overlay CDs and performing a custom installation with OpenSSH, includes sensitive password information in the (1) NIOUTPUT.TXT and (2) NI.LOG log files, which might allow local users to obtain the passwords.
Affected configurations
Node
novellnetwareMatch6.5sp1.1a
| CPE | Name | Operator | Version |
|---|---|---|---|
| novell:netware | novell netware | eq | 6.5 |
Related
cvelist
cvelist
CVE-2004-2414
2005-08-18 04:00:00
nessus
nessus
nvd
nvd
CVE-2004-2414
2004-12-31 05:00:00
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
6.2 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
20.0%
Related for CVE-2004-2414