CVE-2006-2185

The CVE-2006-2185 entry concerns PORTAL.NLM in Novell Netware 6.5 SP5. The authenticated component writes the username and password in cleartext to the abend.log file when groupOperationsMethod fails, enabling a context-dependent attacker with access to log contents to gain privileges. The descri...

CVE-2006-2185: Undefined Security Weakness

PORTAL.NLM in Novell Netware 6.5 SP5 writes the username and password in cleartext to the abend.log log file when the groupOperationsMethod function fails, which allows context-dependent attackers to gain privileges...