CVE Vulnerabilities

CVE-2002-1772

Published: Dec 31, 2002 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Novell Netware 5.0 through 5.1 may allow local users to gain Domain Admin rights by logging into a Novell Directory Services (NDS) account, and executing net use on an NDS_ADM account that is not in the NT domain but has domain access rights, which allows the user to enter a null password.

Affected Software

Name Vendor Start Version End Version
Netware Novell 5.0 (including) 5.0 (including)
Netware Novell 5.0-sp5 (including) 5.0-sp5 (including)
Netware Novell 5.1 (including) 5.1 (including)

References