Bugtraq mailing list archives
Re: Vulnerability in Novell Netware
From: "Thomas M. Payerle" <payerle () PHYSICS UMD EDU>
Date: Mon, 12 Mar 2001 15:21:56 -0500
On Mon, 12 Mar 2001, hhoogend wrote:
Tested here on a netware 4.11 sp 8a network and yes you can login and got all inherited container rights. I think it works only on quebased printing systems and not on NDPS printing systems.
Verified it on 5.1. Also, we noticed that print servers created via HP's JetAdmin utility do not have a blank password by default. I am not sure what the default password is ( and have little doubt that it can be "guessed" with some basic knowledge of the printer in question), but am sharing this as it contributed to some confusion when trying to verify the vulnerability here. Tom Payerle Dept of Physics payerle () physics umd edu University of Maryland (301) 405-6973 College Park, MD 20742-4111 Fax: (301) 314-9525
Current thread:
- Vulnerability in Novell Netware Vulnerability Help (Mar 09)
- Re: Vulnerability in Novell Netware - Yeah, it's a user. So what? Kain (Mar 12)
- Re: Vulnerability in Novell Netware - Yeah, it's a user. So what? Adrian Bolzan (Mar 13)
- <Possible follow-ups>
- Re: Vulnerability in Novell Netware Derek Wilson (Mar 11)
- Re: Vulnerability in Novell Netware Brad Bendily (Mar 12)
- Re: Vulnerability in Novell Netware David Howe (Mar 12)
- Re: Vulnerability in Novell Netware hhoogend (Mar 12)
- Re: Vulnerability in Novell Netware Thomas M. Payerle (Mar 13)
- Re: Vulnerability in Novell Netware Jacek Lipkowski (Mar 14)
- Re: Vulnerability in Novell Netware Jon Miner (Mar 14)
- Re: Vulnerability in Novell Netware Brad Bendily (Mar 12)
- Re: Vulnerability in Novell Netware - Yeah, it's a user. So what? Kain (Mar 12)
- Re: Vulnerability in Novell Netware Mike Glassman - Admin (Mar 12)
- Re: Vulnerability in Novell Netware Ben Ponting (Mar 12)
- Re: Vulnerability in Novell Netware Scott Smith (Mar 13)
- Re: Vulnerability in Novell Netware Matthew Firth (Mar 12)
- Re: Vulnerability in Novell Netware Simple Nomad (Mar 13)
- Re: FW: Vulnerability in Novell Netware Jeffrey Seaton (Mar 15)
- Re: FW: Vulnerability in Novell Netware Jacek Lipkowski (Mar 16)
- Re: FW: Vulnerability in Novell Netware Krzysztof Halasa (Mar 19)