daybrite Absent Member.
Absent Member.
979 views

Is NetStorage insecure?

I am running a publicly accessible NetStorage server on Netware 6.5 SP8.

I found this on the net:
Full Disclosure: Novell Netstorage Multiple Vulnerabilities

Am I vulnerable?
Is there a Novell position paper on this?
What do I tell my boss?
Labels (2)
0 Likes
3 Replies
Knowledge Partner
Knowledge Partner

Re: Is NetStorage insecure?

Daybrite,
> I am running a publicly accessible NetStorage server on Netware 6.5 SP8.
>
> I found this on the net:
> 'Full Disclosure: Novell Netstorage Multiple Vulnerabilities'
> (http://seclists.org/fulldisclosure/2009/Mar/0419.html)
>
> Am I vulnerable?
> Is there a Novell position paper on this?
> What do I tell my boss?
>

The vulnerability appears to be tested against SP6. Let me see what
Novell has to say about SP8. Menawhile, I tested against an SP7 server an
could not duplicate any of the issues described.

- Anders Gustafsson (Sysop)
The Aaland Islands (N60 E20)

Discover the Novell forums at http://forums.novell.com

Novell does not monitor these forums officially.
Enhancement requests for all Novell products may be made at
http://support.novell.com/enhancement

0 Likes
Knowledge Partner
Knowledge Partner

Re: Is NetStorage insecure?

On Thu, 16 Apr 2009 14:46:05 +0000, daybrite wrote:

> I found this on the net:
> 'Full Disclosure: Novell Netstorage Multiple Vulnerabilities'
> (http://seclists.org/fulldisclosure/2009/Mar/0419.html)
>
> Am I vulnerable?
> Is there a Novell position paper on this? What do I tell my boss?


I'll ask support.


--
---------------------------------------------------------------------------
David Gersic dgersic_@_niu.edu
Novell Knowledge Partner http://forums.novell.com

Please post questions in the newsgroups. No support provided via email.

0 Likes
Knowledge Partner
Knowledge Partner

Re: Is NetStorage insecure?

The answer is that some issues remain and Novell is aware and working
on it.

That being said, you need to be already logged in to do anything, this
limits yiur exposure somewhat.

- Anders Gustafsson (Sysop)
The Aaland Islands (N60 E20)

Discover the Novell forums at http://forums.novell.com

Novell does not monitor these forums officially.
Enhancement requests for all Novell products may be made at
http://support.novell.com/enhancement

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.