CVE-2004-2734

Published: Dec 31, 2004Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

webadmin-apache.conf in Novell Web Manager of Novell NetWare 6.5 uses an uppercase Alias tag with an inconsistent lowercase directory tag for a volume, which allows remote attackers to bypass access control to the WEB-INF folder.

Affected (4)

Products: Novell: Netware

Novell

1 product

Netware

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Novell Netware	Version 6.5
Novell Netware	Version 6.5 sp1.1a
Novell Netware	Version 6.5 sp1.1b
Novell Netware	Version 6.5 sp1

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (12)

http://secunia.com/advisories/12049

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1011012

Source: cve@mitre.org

http://support.novell.com/cgi-bin/search/searchtid.cgi?/10094233.htm

Source: cve@mitre.org

http://www.osvdb.org/9103

Source: cve@mitre.org

http://www.securityfocus.com/bid/11000

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/40478

Source: cve@mitre.org

http://secunia.com/advisories/12049