Summary
The Netware Management Portal software is running on this machine. The Portal allows anyone to view the current server configuration and locate other Portal servers on the network. It is possible to browse the server's filesystem by requesting the volume in the URL. However, a valid user account is needed to do so.
Solution
Disable this service if it is not in use or block connections to this server on TCP ports 8008 and 8009.
Severity
Classification
-
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
Related Vulnerabilities
- Apple Safari JavaScript Implementation Information Disclosure Vulnerability (Mac OS X)
- Adobe Reader Multiple Unspecified Vulnerabilities Jun06 (Mac OS X)
- Apple Safari JavaScript Implementation Information Disclosure Vulnerability (Windows)
- Asterisk SIP REGISTER Response Username Enumeration Vulnerability
- Adobe Digital Edition Information Disclosure Vulnerability (Windows)