Description
RCONAG6 for Novell Netware SP2, while running RconJ in secure mode, allows remote attackers to bypass authentication using the RconJ "Secure IP" (SSL) option during a connection.
References
- 20020821 NOVL-2002-2963349 - Rconag6 Secure IP Login Vulnerability - NW6SP2 mailing-list
- http://support.novell.com/servlet/tidfinder/2963349
- VU#746251 third-party-advisory
- 5541 vdb-entry
- netware-rconj-no-password(9928) vdb-entry