Secunia

A vulnerability has been reported in Novell Netware, which can be exploited by malicious people to bypass certain security restrictions.

Xwindow sessions can be redirected to clients via HTTP. The vulnerability is caused due to an error where the GUI can be accessed remotely without authentication. This can be exploited to bypass certain security restrictions and gain access to the server Console.

Example:
https://[victim]:8009/GUIMirror/Start

The vulnerability has been reported in version 6.5.

Solution
Apply patch for NetWare Server 6.5sp2 or later:
Further details available in Customer Area

Provided and/or discovered by
Reported by vendor.

Changelog
Further details available in Customer Area

Original Advisory
Novell:
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971038.htm

Deep Links
Links available in Customer Area