Vulnerability Scanning Solutions, LLC.
Our Process
What We Scan For
Sample Report
Client List
Contact Us
What We Scan For
Family: Netware --> Category: infos

Netware NDS Object Enumeration Vulnerability Scan

Vulnerability Scan Summary
Netware NDS Object Enumeration

Detailed Explanation for this Vulnerability Test

Synopsis :

Remote directory server leaks information.

Description :

This host is a Novell Netware (eDirectory) server, and has browse
rights on the PUBLIC object.

It is possible to enumerate all NDS objects, including users, with
crafted queries. A possible hacker can use this to gain information about
this host.

Solution :

The NDS object PUBLIC should not have Browse rights the tree should
be restricted to authenticated users only.

Removing Browse rights from the object will fix this issue. If this
is an external system it is recommended that access
to port 524 be blocked from the Internet.

Threat Level:

Low / CVSS Base Score : 2

Click HERE for more information and discussions on this network vulnerability scan.


P.O. Box 827051

Pembroke Pines, FL 33082-7051

Vulnerability Scanning Solutions, LLC.