OSVDB ID: 25780 Title: Novell NetWare abend.log User Credentials Disclosure |
Info |
|
|
Dates |
||||
|
|
Description |
Novell NetWare contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when PORTAL.NLM function groupOperationsMethod() fails, which will write the username and password in cleartext to the abend.log file, resulting in a loss of confidentiality. |
Classification |
Location:
Local Access Required
Attack Type: Information Disclosure Impact: Loss of Confidentiality Exploit: Exploit Unknown Disclosure: OSVDB Verified, Vendor Verified |
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, vendor has released a patch httpstk5.exe to address this vulnerability. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |