← Back

CVE-2008-5696

nvd nist
Published: Dec 19, 2008Modified: Apr 23, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

Novell NetWare 6.5 before Support Pack 8, when an OES2 Linux server is installed into the NDS tree, does not require a password for the ApacheAdmin console, which allows remote attackers to reconfigure the Apache HTTP Server via console operations.

Affected (10)

Products: Novell: Netware
Novell
1 product
Netware
Configuration A
10 vulnerable
Vulnerable SoftwareAffected Versions
Novell
Netware
Up to 6.5
Netware
Version 6.5
Netware
Version 6.5 sp1.1a
Netware
Version 6.5 sp1.1b
Netware
Version 6.5 sp1
Netware
Version 6.5 sp2
Netware
Version 6.5 sp3
Netware
Version 6.5 sp4
Netware
Version 6.5 sp5
Netware
Version 6.5 sp6

Related CWEs

CWE-255
CWE-255

References (12)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.