CVE-2007-3200

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-06-12 · updated 2026-06-16

Description

NMASINST in Novell Modular Authentication Service (NMAS) 3.1.2 and earlier on NetWare logs its invoking command line to NMASINST.LOG, which might allow local users to obtain the admin username and password by reading this file.

Affected products

Novell Modular Authentication Service: through 3.1.2

References

http://osvdb.org/35943
http://secunia.com/advisories/25592
http://securitytracker.com/id?1018215
http://www.securityfocus.com/bid/24405
http://www.vupen.com/english/advisories/2007/2118
https://exchange.xforce.ibmcloud.com/vulnerabilities/34806
https://secure-support.novell.com/KanisaPlatform/Publishing/249/3260550_f.SAL_Public.html
http://osvdb.org/35943
http://secunia.com/advisories/25592
http://securitytracker.com/id?1018215
http://www.securityfocus.com/bid/24405
http://www.vupen.com/english/advisories/2007/2118

Get alerted when CVE-2007-3200 or the next vulnerability affects your stack