Login Request a demo
Unscored severity · published May 22, 2006
CVE-2006-2185
PORTAL.NLM in Novell Netware 6.5 SP5 writes the username and password in cleartext to the abend.log log file when the groupOperationsMethod function fails, which allows…
–
CVSS
1.6%
EPSS
No
On KEV
Description
PORTAL.NLM in Novell Netware 6.5 SP5 writes the username and password in cleartext to the abend.log log file when the groupOperationsMethod function fails, which allows context-dependent attackers to gain privileges.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Netware · Novell
6.5 · source: NVD
Affected product
NE
Netware
Novell
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-2185
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-2185
secunia.com
http://secunia.com/advisories/20288
Patch
http://securitytracker.com/id?1016106
Patch
http://support.novell.com/cgi-bin/search/searchtid.cgi?2973698.htm
www.osvdb.org
http://www.osvdb.org/25780
www.securityfocus.com
http://www.securityfocus.com/bid/18017
www.vupen.com
http://www.vupen.com/english/advisories/2006/1829
More from Netware
4.0
CVE-1999-0524
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts
–
CVE-2011-4191
Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitrary code or cause a denial of service…
–
CVE-2010-4228
Stack-based buffer overflow in NWFTPD.NLM before 5.10.02 in the FTP server in Novell NetWare allows remote authenticated users to execute arbitrary code or cause a denial of…
–
CVE-2010-4227
The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of service (abend) or execute arbitrary code via a crafted,…
–
CVE-2010-2351
Stack-based buffer overflow in the CIFS.NLM driver in Netware SMB 1.0 for Novell Netware 6.5 SP8 and earlier allows remote attackers to execute arbitrary code via a Sessions Setup…