CVE-2008-5696: Novell Netware

High severity, CVSS 9.3. EPSS: 3.3% chance of exploitation in the next 30 days.

Novell NetWare 6.5 before Support Pack 8, when an OES2 Linux server is installed into the NDS tree, does not require a password for the ApacheAdmin console, which allows remote attackers to reconfigure the Apache HTTP Server via console operations.

Affected products

• Novell Netware: up to and including 6.5; version 6.5 only

Published 2008-12-19. Last modified 2026-06-16.