|
|
Family: Netware --> Category: infos
Netware NDS Object Enumeration Vulnerability Scan
Vulnerability Scan Summary
Netware NDS Object Enumeration
Detailed Explanation for this Vulnerability Test
Synopsis :
Remote directory server leaks information.
Description :
This host is a Novell Netware (eDirectory) server, and has browse
rights on the PUBLIC object.
It is possible to enumerate all NDS objects, including users, with
crafted queries. A possible hacker can use this to gain information about
this host.
Solution :
The NDS object PUBLIC should not have Browse rights the tree should
be restricted to authenticated users only.
Removing Browse rights from the object will fix this issue. If this
is an external system it is recommended that access
to port 524 be blocked from the Internet.
Threat Level:
Low / CVSS Base Score : 2
(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)
Click HERE for more information and discussions on this network vulnerability scan.
|
