Lucene search
HistoryJun 12, 2007 - 11:30 p.m.
CVE-2007-3200
cve-2007-3200
novell
nmas
netware
security vulnerability
admin credentials
local users
information disclosure
6.5 Medium
AI Score
Confidence
Low
4.9 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:C/I:N/A:N
0.0005 Low
EPSS
Percentile
15.8%
NMASINST in Novell Modular Authentication Service (NMAS) 3.1.2 and earlier on NetWare logs its invoking command line to NMASINST.LOG, which might allow local users to obtain the admin username and password by reading this file.
Affected configurations
Node
novellmodular_authentication_serviceRange≤3.1.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| novell:modular_authentication_service | novell modular authentication service | le | 3.1.2 |
Related
nvd
nvd
CVE-2007-3200
2007-06-12 23:30:00
cvelist
cvelist
CVE-2007-3200
2007-06-12 23:00:00
prion
prion
Default credentials
2007-06-12 23:30:00
6.5 Medium
AI Score
Confidence
Low
4.9 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:C/I:N/A:N
0.0005 Low
EPSS
Percentile
15.8%
Related for CVE-2007-3200