Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Apr 16, 2026

CVE-2004-2734

Description

webadmin-apache.conf in Novell Web Manager of Novell NetWare 6.5 uses an uppercase Alias tag with an inconsistent lowercase directory tag for a volume, which allows remote attackers to bypass access control to the WEB-INF folder.

Affected products

Novell/Netware4 versions
cpe:2.3:o:novell:netware:6.5:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:novell:netware:6.5:*:*:*:*:*:*:*
- cpe:2.3:o:novell:netware:6.5:sp1:*:*:*:*:*:*
- cpe:2.3:o:novell:netware:6.5:sp1.1a:*:*:*:*:*:*
- cpe:2.3:o:novell:netware:6.5:sp1.1b:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

secunia.com/advisories/12049nvdVendor Advisory
securitytracker.com/idnvd
support.novell.com/cgi-bin/search/searchtid.cginvd
www.osvdb.org/9103nvd
www.securityfocus.com/bid/11000nvd
exchange.xforce.ibmcloud.com/vulnerabilities/40478nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000