Design/Logic Flaw

2008-12-1918:30:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

0.024 Low

EPSS

Percentile

90.0%

JSON

Novell NetWare 6.5 before Support Pack 8, when an OES2 Linux server is installed into the NDS tree, does not require a password for the ApacheAdmin console, which allows remote attackers to reconfigure the Apache HTTP Server via console operations.

CPENameOperatorVersion
netwareeq6.5 sp6
netwarele6.5
netwareeq6.5 sp3
netwareeq6.5 sp1
netwareeq6.5 sp2
netwareeq6.5 sp1.1a
netwareeq6.5 sp4
netwareeq6.5 sp1.1b
netwareeq6.5 sp5
netwareeq6.5

Name	Operator	Version
netware	eq	6.5 sp6
netware	le	6.5
netware	eq	6.5 sp3
netware	eq	6.5 sp1
netware	eq	6.5 sp2
netware	eq	6.5 sp1.1a
netware	eq	6.5 sp4
netware	eq	6.5 sp1.1b
netware	eq	6.5 sp5
netware	eq	6.5