CVE-2005-0819

The xvesa code in Novell Netware 6.5 SP2 and SP3 allows remote attackers to redirect the xsession without authentication via a direct request to GUIMirror/Start.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-05-02

Last modified

2024-08-07

Affected products

• Netware (Novell)

References

• http://securitytracker.com/id?1013460
• http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971038.htm
• http://www.securityfocus.com/bid/12831