CVE-2004-2734

2007-10-0910:00:00

mitre

www.cve.org

6.8 Medium

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.7%

JSON

webadmin-apache.conf in Novell Web Manager of Novell NetWare 6.5 uses an uppercase Alias tag with an inconsistent lowercase directory tag for a volume, which allows remote attackers to bypass access control to the WEB-INF folder.

References

secunia.com/advisories/12049

securitytracker.com/id?1011012

support.novell.com/cgi-bin/search/searchtid.cgi?/10094233.htm

www.osvdb.org/9103

www.securityfocus.com/bid/11000

exchange.xforce.ibmcloud.com/vulnerabilities/40478