CVE-2007-3200
First published: Tue Jun 12 2007(Updated: )
NMASINST in Novell Modular Authentication Service (NMAS) 3.1.2 and earlier on NetWare logs its invoking command line to NMASINST.LOG, which might allow local users to obtain the admin username and password by reading this file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Novell Modular Authentication Service | <=3.1.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://secure-support.novell.com/KanisaPlatform/Publishing/249/3260550_f.SAL_Public.html
- http://www.securityfocus.com/bid/24405
- http://securitytracker.com/id?1018215
- http://secunia.com/advisories/25592
- http://osvdb.org/35943
- http://www.vupen.com/english/advisories/2007/2118
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34806
Frequently Asked Questions
What is the severity of CVE-2007-3200?
CVE-2007-3200 is considered a high severity vulnerability due to the potential exposure of admin credentials.
How do I fix CVE-2007-3200?
To fix CVE-2007-3200, upgrade to a version of Novell Modular Authentication Service later than 3.1.2 that addresses this logging issue.
Who is affected by CVE-2007-3200?
CVE-2007-3200 affects local users of Novell Modular Authentication Service versions 3.1.2 and earlier on NetWare.
What is the impact of CVE-2007-3200?
The impact of CVE-2007-3200 is that it may allow local users to read sensitive admin credentials from the NMASINST.LOG file.
Is CVE-2007-3200 an authentication vulnerability?
Yes, CVE-2007-3200 is classified as an authentication vulnerability since it compromises the integrity of admin authentication.
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/tags
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- vendor/novell
- canonical/novell modular authentication service
- version/novell modular authentication service/3.1.2