Description
NMASINST in Novell Modular Authentication Service (NMAS) 3.1.2 and earlier on NetWare logs its invoking command line to NMASINST.LOG, which might allow local users to obtain the admin username and password by reading this file.
References
- ADV-2007-2118 vdb-entry
- 24405 vdb-entry
- 35943 vdb-entry
- 1018215 vdb-entry
- 25592 third-party-advisory
- novell-nmasinst-information-disclosure(34806) vdb-entry
- https://secure-support.novell.com/KanisaPlatform/Publishing/249/3260550_f.SAL_Public.html