← Database

CVE-2004-2734

CRITICAL CVSS: 10.0 Published: 2004-12-31 Modified: 2026-06-16

Description

webadmin-apache.conf in Novell Web Manager of Novell NetWare 6.5 uses an uppercase Alias tag with an inconsistent lowercase directory tag for a volume, which allows remote attackers to bypass access control to the WEB-INF folder.

Affected Platforms

Novell Netware

Weakness Type

CWE-287

References