Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2008-5696

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Novell Netware是一款商业性质的网络操作系统。 如果将OES2 Linux服务器安装在已运行NetWare的树结构上，则安装后用户无需输入口令便可以访问ApacheAdmin控制台，这允许远程攻击者通过控制台操作重新配置Apache HTTP服务器。

AI Predicted 7.5 Difficulty: Easy EPSS 3.29% · P88
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2008-5696

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Novell NetWare 6.5 before Support Pack 8, when an OES2 Linux server is installed into the NDS tree, does not require a password for the ApacheAdmin console, which allows remote attackers to reconfigure the Apache HTTP Server via console operations.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Novell Netware ApacheAdmin控制台空口令漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Novell Netware是一款商业性质的网络操作系统。 如果将OES2 Linux服务器安装在已运行NetWare的树结构上，则安装后用户无需输入口令便可以访问ApacheAdmin控制台，这允许远程攻击者通过控制台操作重新配置Apache HTTP服务器。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2008-5696

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2008-5696

请登录查看更多情报信息。

Vendor Advisories for CVE-2008-5696 (5)

Other References for CVE-2008-5696 (1)

Same Patch Batch · n/a · 2008-12-19 · 26 CVEs total

CVE-2008-5684 Sun Solaris 'libICE' 未明 拒绝服务漏洞
CVE-2008-5683 Opera Web 浏览器信息泄露漏洞
CVE-2008-5682 Opera Web浏览器XSLT内嵌模板跨站攻击漏洞
CVE-2008-5681 Opera Web浏览器9.63版本修复多个安全漏洞
CVE-2008-5680 Opera Web 缓冲区溢出漏洞
CVE-2008-5679 Opera Web Browser HTML Parsing 堆远程代码执行漏洞
CVE-2008-5691 Phonecian Casina FlashAX Active控件缓冲区溢出漏洞
CVE-2008-5690 Sun Solaris Kerberos本地拒绝服务漏洞
CVE-2008-5689 Sun Solaris IP隧道参数空指针引用漏洞
CVE-2008-5688 Mediawiki debugging敏感信息泄露漏洞
CVE-2008-5687 mediawiki 权限许可和访问控制漏洞
CVE-2008-5686 IBM Tivoli Provisioning Manager SOAP命令绕过认证漏洞
CVE-2008-5685 Sun Fire Servers IP Spoofing 安全绕过漏洞
CVE-2008-5692 Ipswitch WS_FTP Server Manager 权限绕过漏洞
CVE-2008-5252 mediawiki 跨站请求伪造漏洞
CVE-2008-5250 MediaWiki Wiki页跨站攻击漏洞
CVE-2008-5249 MediaWiki 跨站脚本攻击河多个 HTML 注入漏洞
CVE-2008-5086 libvirt Local 安全绕过漏洞
CVE-2008-5078 GNU Enscript src/psgen.c栈溢出漏洞
CVE-2008-4122 Joomla 会话设置cookie泄露漏洞

Showing top 20 of 26 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2008-5696

No comments yet

Leave a comment