Results 1 to 5 of 5

Thread: Novell Admins Must Read This!!!

  1. February 3rd, 2002, 01:53 AM #1
    s0nIc
    s0nIc is offline
    Fastest Thing Alive s0nIc's Avatar
    Join Date
    Sep 2001
    Location
    Sydney
    Posts
    1,584

    Exclamation Novell Admins Must Read This!!!

    Novell NetWare NDS Domain Admin Null Password Vulnerability


    Novell NetWare is reportedly prone to an issue which may, under some circumstances, allow an unprivileged NDS user to access NT domain machines using a null password.

    The attacker must possess a valid NDS account. The attacker must target a NDS_ADM account that is in the NDS tree and is checked as having "Domain Admin" rights over the NT domain, but must not exist in the NT domain. If these conditions are satisfied, then it is allegedly possible for the unprivileged NDS user to gain unauthorized access to machines in the NT Domain with the privileges of a Domain Admin.
  2. February 3rd, 2002, 02:54 AM #2
    antihaxor
    antihaxor is offline
    Banned
    Join Date
    Dec 2001
    Posts
    400
    Novell has all kinds of security issues..I used to use a hex editor and fool it into thinking it was a fresh install....hehe it would then ask me to set the admin password. If you did it right you would not corrupt any data
  3. February 3rd, 2002, 03:34 PM #3
    zion1459
    zion1459 is offline
    Senior Member
    Join Date
    Oct 2001
    Posts
    293
    Novell is dying, if not already dead... Seldom have I seen a system with so many flaws (oh wait, there is of course windows...lmao )
    zion1459
    Visit: http://www.cpc-net.org
    \"Software is like sex: it\'s better when it\'s free.\" -Linus Torvalds
  4. February 3rd, 2002, 04:12 PM #4
    MrLinus
    MrLinus is offline
    Just a Virtualized Geek MrLinus's Avatar
    Join Date
    Sep 2001
    Location
    Redondo Beach, CA
    Posts
    7,323
    Irregardless if someone thinks that Novell may or may not be dying (the same has been said of *nix and Apple for years..), I am curious as to which Novell release this possible vulnerability exists with. Novell 5 and 6 have been pretty secure from what I've seen with little to no vulnerabilities (I know of one for the BorderManager 3.x firewall -- nasty DoS that I tested on a friend and literally destroyed his firewall as a result) so I am curious as to which version of Novell this affects.

    Novell Netware 3.x and 4.x are relatively unsecure and at this point, Novell itself says upgrading is the best security answer. S0nic, could you clarify that for me?
    Goodbye, Mittens (1992-2008). My pillow will be cold without your purring beside my head
    Extra! Extra! Get your FREE copy of Insight Newsletter||MsMittens' HomePage
  5. February 3rd, 2002, 05:58 PM #5
    gold eagle
    gold eagle is offline
    Senior Member
    Join Date
    Dec 2001
    Posts
    1,193
    I too would like to know which version, since I run several.

    Also it appears this is a combo novell/ms problem and related to the way nds and the domain processes interact.

    s0nIc let us know what else you find.
    Trappedagainbyperfectlogic.
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules