Description
PORTAL.NLM in Novell Netware 6.5 SP5 writes the username and password in cleartext to the abend.log log file when the groupOperationsMethod function fails, which allows context-dependent attackers to gain privileges.
References
- 20288 third-party-advisory
- 25780 vdb-entry
- http://support.novell.com/cgi-bin/search/searchtid.cgi?2973698.htm
- 1016106 vdb-entry
- ADV-2006-1829 vdb-entry
- 18017 vdb-entry
- netware-portal-information-disclosure(26488) vdb-entry