CVE-2004-2104

Novell NetWare Enterprise Web Server 5.1-6.0 - Info Disclosure

Title source: llm
STIX 2.1

Description

Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, including the internal IP address, via a direct request to (1) snoop.jsp, (2) SnoopServlet, (3) env.bas, or (4) lcgitest.nlm.

Exploits (3)

exploitdb WRITEUP VERIFIED
by Rafel Ivgi The-Insider · textremotenetware
https://www.exploit-db.com/exploits/23588
exploitdb WRITEUP VERIFIED
by Rafel Ivgi The-Insider · textremotenetware
https://www.exploit-db.com/exploits/23587
exploitdb WORKING POC VERIFIED
by Rafel Ivgi The-Insider · textremotenetware
https://www.exploit-db.com/exploits/23586

References (9)

Core 9
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/3720
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=107487862304440&w=2
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/10711
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/3721
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/4952
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/14921
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/3722
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/9479
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/3715

Scores

EPSS 0.0696
EPSS Percentile 91.5%

Details

Status published
Products (2)
novell/netware 5.1
novell/netware 6.0
Published Dec 31, 2004
Tracked Since Feb 18, 2026