Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> Netware >> Novell NetWare HTTP POST Perl Code Execution Vulnerability


Vulnerability Assessment Details

Novell NetWare HTTP POST Perl Code Execution Vulnerability

Vulnerability Assessment Summary
Webserver perl handler executes arbitrary POSTs

Detailed Explanation for this Vulnerability Assessment

Novell Netware contains multiple default web server installations.
The Netware Enterprise Web Server (Netscape/IPlanet) has a perl
handler which will run arbitrary code given to in a POST request
version 5.x (through SP4) and 6.x (through SP1) are effected.

Network Security Threat Level: High

Solution : Install 5.x SP5 or 6.0 SP2

Additionally, the enterprise manager web interface may be used to
unmap the /perl handler entirely. If it is not being used, minimizing
this service would be appropriate.

Networks Security ID: 5520, 5521, 5522

Vulnerability Assessment Copyright: This script is Copyright (C) 2002 visigoth

Cables, Connectors


lot of 10 Juniper EX-SFP-10GE-SR Compatible 10GBASE-SR SFP+ 850nm 300m DOM -J499 picture

lot of 10 Juniper EX-SFP-10GE-SR Compatible 10GBASE-SR SFP+ 850nm 300m DOM -J499

$220.00



Juniper Networks EX3300-48P 48-Port PoE+ 4x SFP+ Network Switch w/ Power Cord picture

Juniper Networks EX3300-48P 48-Port PoE+ 4x SFP+ Network Switch w/ Power Cord

$43.95



JUNIPER EX3400-48P 48x 1GB PoE+ RJ-45 4x 10GB SFP+ 2x 40GB QSFP+, DUAL AC POWER picture

JUNIPER EX3400-48P 48x 1GB PoE+ RJ-45 4x 10GB SFP+ 2x 40GB QSFP+, DUAL AC POWER

$210.00



Juniper EX3300-48P, 48 Port PoE+ Gigabit Network Switch w/ Power cord picture

Juniper EX3300-48P, 48 Port PoE+ Gigabit Network Switch w/ Power cord

$54.99



EX2300-24P Juniper 24-port 10/100/1000BASE-T PoE+ 4 x 1/10GbE SFP/SFP+ UNCLAIMED picture

EX2300-24P Juniper 24-port 10/100/1000BASE-T PoE+ 4 x 1/10GbE SFP/SFP+ UNCLAIMED

$450.00



Juniper Networks EX3400-48P 48x Gigabit PoE+ RJ45 2x 40Gb/s QSFP+ Switch picture

Juniper Networks EX3400-48P 48x Gigabit PoE+ RJ45 2x 40Gb/s QSFP+ Switch

$166.24



Juniper Networks EX2200-C-12P-2G 12 Port Gigabit PoE 2 T/SFP 1G Network Switch picture

Juniper Networks EX2200-C-12P-2G 12 Port Gigabit PoE 2 T/SFP 1G Network Switch

$129.00



Juniper Networks EX3300 EX3300-48P 48-Port Gigabit PoE+ Switch picture

Juniper Networks EX3300 EX3300-48P 48-Port Gigabit PoE+ Switch

$41.28



Juniper Networks EX3300-24P 24-Port PoE+ 4x SFP+ Network Switch TESTED picture

Juniper Networks EX3300-24P 24-Port PoE+ 4x SFP+ Network Switch TESTED

$79.99



Juniper EX2300-48P  PoE+ Switch 48x 1GbE & 4 SFP+/SFP 10G uplinks, Tested picture

Juniper EX2300-48P PoE+ Switch 48x 1GbE & 4 SFP+/SFP 10G uplinks, Tested

$289.00



Discussions

No Discussions have been posted on this vulnerability.