CVE-2007-3200 json
NMASINST in Novell Modular Authentication Service (NMAS) 3.1.2 and earlier on NetWare logs its invoking command line to NMASINST.LOG, which…
published 2007-06-12 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-3192
- cvss
- 4.9
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.3%
- EPSS 0.3% chance of exploitation in 30 days, percentile 28%
- public exploits
- 0
- none known
Summary
NMASINST in Novell Modular Authentication Service (NMAS) 3.1.2 and earlier on NetWare logs its invoking command line to NMASINST.LOG, which might allow local users to obtain the admin username and password by reading this file.
Exploit prediction
0.34% chance of exploitation in the next 30 days, higher than 28% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 4.9 | AV:L/AC:L/Au:N/C:C/I:N/A:N |
References
-
secunia.com
/advisories/25592
third-party-advisory, vendor-advisory
-
vupen.com
/english/advisories/2007/2118
vdb-entry
-
securityfocus.com
/bid/24405
vdb-entry
-
osvdb.org
/35943
vdb-entry
-
securitytracker.com
/id?1018215
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/34806
vdb-entry
- secure-support.novell.com /KanisaPlatform/Publishing/249/3260550_f.SAL_Public.html
Sources
- CVE List CVE-2007-3200
- NVD CVE-2007-3200
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.