CVE-2007-3200
UnknownEPSS 0.34%
Last modified
CVE-2007-3200 is a vulnerability of currently unknown severity. NMASINST in Novell Modular Authentication Service (NMAS) 3.1.2 and earlier on NetWare logs its invoking command line to NMASINST.LOG, which might allow local users to obtain the admin username and password by reading this file.. EPSS estimates a 0.34% chance of exploitation in the next 30 days.
Description
NMASINST in Novell Modular Authentication Service (NMAS) 3.1.2 and earlier on NetWare logs its invoking command line to NMASINST.LOG, which might allow local users to obtain the admin username and password by reading this file.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Novell | Modular Authentication Service | <= 3.1.2 |
References
- http://secunia.com/advisories/25592Vendor Advisory
- http://secunia.com/advisories/25592Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-3200?
NMASINST in Novell Modular Authentication Service (NMAS) 3.1.2 and earlier on NetWare logs its invoking command line to NMASINST.LOG, which might allow local users to obtain the admin username and password by reading this file.
How severe is CVE-2007-3200?
Severity scoring for CVE-2007-3200 is pending analysis. The EPSS model estimates a 0.34% probability of exploitation in the next 30 days.
How do I fix CVE-2007-3200?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-3194Multiple PHP remote file inclusion vulnerabilities in myBlog…9.8
- CVE-2007-3195Cross-site scripting (XSS) vulnerability in index.php in ERF…
- CVE-2007-3196SQL injection vulnerability in vBSupport.php in vSupport Int…
- CVE-2007-3197SQL injection vulnerability in vBSupport.php in vBSupport 1.…
- CVE-2007-3198Cross-site scripting (XSS) vulnerability in comments.php in …
- CVE-2007-3199Unrestricted file upload vulnerability in Link Request Conta…
- CVE-2007-3201Visual truncation vulnerability in Windows Privacy Tray (Win…
- CVE-2007-3202Cross-site scripting (XSS) vulnerability in the rich text ed…
- CVE-2007-3203Stack-based buffer overflow in smtpdll.dll in the SMTP servi…
- CVE-2007-3204SQL injection vulnerability in auth.php in Just For Fun Netw…
- CVE-2007-3205The parse_str function in (1) PHP, (2) Hardened-PHP, and (3)…
- CVE-2007-3207Buffer overflow in the NFS mount daemon (XNFS.NLM) in Novell…
Are you affected by CVE-2007-3200?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST