What is the severity of CVE-2008-5696?

CVE-2008-5696 is considered a critical vulnerability due to its potential to allow remote unauthorized access to the ApacheAdmin console.

How does CVE-2008-5696 affect Novell NetWare versions?

CVE-2008-5696 affects Novell NetWare 6.5 and its various service pack versions prior to Support Pack 8.

How do I fix CVE-2008-5696?

To fix CVE-2008-5696, upgrade Novell NetWare to Support Pack 8 or later.

What are the potential impacts of CVE-2008-5696?

The impacts of CVE-2008-5696 include unauthorized reconfiguration of the Apache HTTP Server, potentially leading to further exploits.

What is the nature of the vulnerability in CVE-2008-5696?

CVE-2008-5696 is a security misconfiguration issue that does not require a password for accessing the ApacheAdmin console.

Vulnerability/
CVE-2008-5696

critical

9.3

CWE

255

19/12/2008

7/8/2024

CVE-2008-5696

First published: Fri Dec 19 2008(Updated: )

Novell NetWare 6.5 before Support Pack 8, when an OES2 Linux server is installed into the NDS tree, does not require a password for the ApacheAdmin console, which allows remote attackers to reconfigure the Apache HTTP Server via console operations.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Novell NetWare	=6.5-sp6
Novell NetWare	<=6.5
Novell NetWare	=6.5-sp3
Novell NetWare	=6.5-sp1
Novell NetWare	=6.5-sp2
Novell NetWare	=6.5-sp1.1a
Novell NetWare	=6.5-sp4
Novell NetWare	=6.5-sp1.1b
Novell NetWare	=6.5-sp5
Novell NetWare	=6.5

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2008-5696?
CVE-2008-5696 is considered a critical vulnerability due to its potential to allow remote unauthorized access to the ApacheAdmin console.
How does CVE-2008-5696 affect Novell NetWare versions?
CVE-2008-5696 affects Novell NetWare 6.5 and its various service pack versions prior to Support Pack 8.
How do I fix CVE-2008-5696?
To fix CVE-2008-5696, upgrade Novell NetWare to Support Pack 8 or later.
What are the potential impacts of CVE-2008-5696?
The impacts of CVE-2008-5696 include unauthorized reconfiguration of the Apache HTTP Server, potentially leading to further exploits.
What is the nature of the vulnerability in CVE-2008-5696?
CVE-2008-5696 is a security misconfiguration issue that does not require a password for accessing the ApacheAdmin console.

collector/nvd-historical
collector/nvd-index
agent/references
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/author
agent/severity
agent/weakness
agent/tags
agent/description
agent/first-publish-date
agent/event
agent/source
vendor/novell
canonical/novell netware
version/novell netware/6.5-sp6
version/novell netware/6.5
version/novell netware/6.5-sp3
version/novell netware/6.5-sp1
version/novell netware/6.5-sp2
version/novell netware/6.5-sp1.1a
version/novell netware/6.5-sp4
version/novell netware/6.5-sp1.1b
version/novell netware/6.5-sp5

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2008-5696?
CVE-2008-5696 is considered a critical vulnerability due to its potential to allow remote unauthorized access to the ApacheAdmin console.
How does CVE-2008-5696 affect Novell NetWare versions?
CVE-2008-5696 affects Novell NetWare 6.5 and its various service pack versions prior to Support Pack 8.
How do I fix CVE-2008-5696?
To fix CVE-2008-5696, upgrade Novell NetWare to Support Pack 8 or later.
What are the potential impacts of CVE-2008-5696?
The impacts of CVE-2008-5696 include unauthorized reconfiguration of the Apache HTTP Server, potentially leading to further exploits.
What is the nature of the vulnerability in CVE-2008-5696?
CVE-2008-5696 is a security misconfiguration issue that does not require a password for accessing the ApacheAdmin console.