CVE-2004-2414: Novell Netware

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Novell NetWare 6.5 SP 1.1, when installing or upgrading using the Overlay CDs and performing a custom installation with OpenSSH, includes sensitive password information in the (1) NIOUTPUT.TXT and (2) NI.LOG log files, which might allow local users to obtain the passwords.

Affected products

• Novell Netware: version 6.5 only

Published 2004-12-31. Last modified 2026-06-16.