This script is Copyright (C) 2002-2015 Digital Defense, Inc
Remote directory server leaks information.
This host is a Novell NetWare (eDirectory) server, and has browse
rights on the PUBLIC object.
It is possible to enumerate all NDS objects, including users, with
crafted queries. An attacker can use this to gain information about
The NDS object PUBLIC should not have Browse rights the tree should
be restricted to authenticated users only.
Removing Browse rights from the object will fix this issue. If this
is an external system it is recommended that access
to port 524 be blocked from the Internet.
Risk factor :
Medium / CVSS Base Score : 5.0
Get Nessus Professional to scan unlimited IPs, run compliance checks & moreBuy Nessus Professional Now