CVEvulnerability
CVE-2011-2223
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-08-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 sends the Admin LDAP password in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.
Affected configurations
• novell data synchronizer 1.0.0
• novell data synchronizer 1.1.0
• novell data synchronizer 1.1.1
• novell data synchronizer 1.1.2
• novell mobility pack 1.0
• novell mobility pack 1.1
• novell mobility pack 1.1.1
• novell mobility pack 1.1.2
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/45527 Vendor Advisory
- http://www.novell.com/support/viewContent.do?externalId=7009055 Vendor Advisory
- http://www.securityfocus.com/bid/49069 www.securityfocus.com
- http://secunia.com/advisories/45527 Vendor Advisory
- http://www.novell.com/support/viewContent.do?externalId=7009055 Vendor Advisory
- http://www.securityfocus.com/bid/49069 www.securityfocus.com