Vulnerability Description
The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 sends the Admin LDAP password in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Novell | Data Synchronizer | 1.0.0 |
| Novell | Mobility Pack | 1.0 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/45527Vendor Advisory
- http://www.novell.com/support/viewContent.do?externalId=7009055Vendor Advisory
- http://www.securityfocus.com/bid/49069
- http://secunia.com/advisories/45527Vendor Advisory
- http://www.novell.com/support/viewContent.do?externalId=7009055Vendor Advisory
- http://www.securityfocus.com/bid/49069
FAQ
What is CVE-2011-2223?
CVE-2011-2223 is a vulnerability with a CVSS score of 5.0 (MEDIUM). The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 sends the Admin LDAP password in cleartext, which allows remote attackers to obtain sensitive information by sniffi...
How severe is CVE-2011-2223?
CVE-2011-2223 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-2223?
Check the references section above for vendor advisories and patch information. Affected products include: Novell Data Synchronizer, Novell Mobility Pack.