What is the severity of CVE-2004-2414?

CVE-2004-2414 is considered a medium severity vulnerability due to the exposure of sensitive password information.

How do I fix CVE-2004-2414?

To mitigate CVE-2004-2414, it is recommended to avoid using Overlay CDs for installation or upgrade of Novell NetWare 6.5 SP 1.1.

What type of sensitive information is exposed by CVE-2004-2414?

CVE-2004-2414 exposes sensitive password information in the NIOUTPUT.TXT and NI.LOG log files.

Who is affected by CVE-2004-2414?

All local users on a system running Novell NetWare 6.5 SP 1.1 that have accessed the log files are potentially affected by CVE-2004-2414.

What component is primarily involved in CVE-2004-2414?

The primary component involved in CVE-2004-2414 is the OpenSSH implementation included during the custom installation of Novell NetWare 6.5 SP 1.1.

Vulnerability/
CVE-2004-2414

low

2.1

CWE

NVD-CWE-Other

31/12/2004

18/8/2005

8/8/2024

CVE-2004-2414

First published: Fri Dec 31 2004(Updated: )

Novell NetWare 6.5 SP 1.1, when installing or upgrading using the Overlay CDs and performing a custom installation with OpenSSH, includes sensitive password information in the (1) NIOUTPUT.TXT and (2) NI.LOG log files, which might allow local users to obtain the passwords.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Novell NetWare	=6.5-sp1.1a

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2004-2414?
CVE-2004-2414 is considered a medium severity vulnerability due to the exposure of sensitive password information.
How do I fix CVE-2004-2414?
To mitigate CVE-2004-2414, it is recommended to avoid using Overlay CDs for installation or upgrade of Novell NetWare 6.5 SP 1.1.
What type of sensitive information is exposed by CVE-2004-2414?
CVE-2004-2414 exposes sensitive password information in the NIOUTPUT.TXT and NI.LOG log files.
Who is affected by CVE-2004-2414?
All local users on a system running Novell NetWare 6.5 SP 1.1 that have accessed the log files are potentially affected by CVE-2004-2414.
What component is primarily involved in CVE-2004-2414?
The primary component involved in CVE-2004-2414 is the OpenSSH implementation included during the custom installation of Novell NetWare 6.5 SP 1.1.

collector/nvd-historical
collector/nvd-index
agent/type
agent/references
agent/first-publish-date
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/weakness
agent/author
agent/last-modified-date
agent/severity
agent/remedy
agent/tags
agent/description
agent/event
agent/source
vendor/novell
canonical/novell netware
version/novell netware/6.5-sp1.1a

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2004-2414?
CVE-2004-2414 is considered a medium severity vulnerability due to the exposure of sensitive password information.
How do I fix CVE-2004-2414?
To mitigate CVE-2004-2414, it is recommended to avoid using Overlay CDs for installation or upgrade of Novell NetWare 6.5 SP 1.1.
What type of sensitive information is exposed by CVE-2004-2414?
CVE-2004-2414 exposes sensitive password information in the NIOUTPUT.TXT and NI.LOG log files.
Who is affected by CVE-2004-2414?
All local users on a system running Novell NetWare 6.5 SP 1.1 that have accessed the log files are potentially affected by CVE-2004-2414.
What component is primarily involved in CVE-2004-2414?
The primary component involved in CVE-2004-2414 is the OpenSSH implementation included during the custom installation of Novell NetWare 6.5 SP 1.1.

CVE-2004-2414

Remedy

Remedy

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2004-2414?

How do I fix CVE-2004-2414?

What type of sensitive information is exposed by CVE-2004-2414?

Who is affected by CVE-2004-2414?

What component is primarily involved in CVE-2004-2414?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2004-2414?

How do I fix CVE-2004-2414?

What type of sensitive information is exposed by CVE-2004-2414?

Who is affected by CVE-2004-2414?

What component is primarily involved in CVE-2004-2414?