CVE-2006-2185: Novell Netware

Medium severity, CVSS 4.0. EPSS: 1.6% chance of exploitation in the next 30 days.

PORTAL.NLM in Novell Netware 6.5 SP5 writes the username and password in cleartext to the abend.log log file when the groupOperationsMethod function fails, which allows context-dependent attackers to gain privileges.

Affected products

• Novell Netware: version 6.5 only

Published 2006-05-22. Last modified 2026-06-16.