CVE-2007-3200 in Modular_authentication_service

Riassunto

di MITRE

NMASINST in Novell Modular Authentication Service (NMAS) 3.1.2 and earlier on NetWare logs its invoking command line to NMASINST.LOG, which might allow local users to obtain the admin username and password by reading this file.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 12/06/2007
• Divulgazione: 12/06/2007
• Moderazione: accettato
• Voce: VDB-37270
• CPE: pronto
• CWE: CWE-200 (confermato)
• CVSS: 6.2 (VulDB)
• EPSS: 0.00345
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-3200
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-3200
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-3200/