CVE-2004-2414

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16

Description

Novell NetWare 6.5 SP 1.1, when installing or upgrading using the Overlay CDs and performing a custom installation with OpenSSH, includes sensitive password information in the (1) NIOUTPUT.TXT and (2) NI.LOG log files, which might allow local users to obtain the passwords.

Affected products

Novell Netware: 6.5-sp1.1a

References

http://secunia.com/advisories/11188
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2968534.htm
http://www.securityfocus.com/bid/9934
https://exchange.xforce.ibmcloud.com/vulnerabilities/15600
http://secunia.com/advisories/11188
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2968534.htm
http://www.securityfocus.com/bid/9934
https://exchange.xforce.ibmcloud.com/vulnerabilities/15600

Get alerted when CVE-2004-2414 or the next vulnerability affects your stack