CVE-2007-3200

Published: Jun 12, 2007Modified: Apr 23, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:C/I:N/A:N

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

NMASINST in Novell Modular Authentication Service (NMAS) 3.1.2 and earlier on NetWare logs its invoking command line to NMASINST.LOG, which might allow local users to obtain the admin username and password by reading this file.

Affected (1)

Products: Novell: Modular Authentication Service

Novell

1 product

Modular Authentication Service

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Novell Modular Authentication Service	Up to 3.1.2

References (14)

http://osvdb.org/35943

Source: cve@mitre.org

http://secunia.com/advisories/25592

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1018215

Source: cve@mitre.org

http://www.securityfocus.com/bid/24405

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/2118

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34806

Source: cve@mitre.org

https://secure-support.novell.com/KanisaPlatform/Publishing/249/3260550_f.SAL_Public.html

Source: cve@mitre.org

http://osvdb.org/35943