CVE-2004-2414: Novell NetWare 6.5 SP 1.1, when installing or upgrading using the Overlay CDs and performing a custom insta...

Security readout for executives and security teams

During certain Novell NetWare 6.5 SP 1.1 installs or upgrades, password information could be written into installation log files. A person who already has local access to the server could read those files and recover passwords. The issue is legacy, narrow in scope, and not listed as known exploited in the provided sources. Exposure is most likely in legacy NetWare 6.5 SP 1.1 environments that used Overlay CDs and custom-installed OpenSSH. Organizations without those systems are unlikely to be exposed. Remaining risk depends on whether the affected log files still exist and who can read them locally. Treat this as a legacy credential hygiene issue. It is not supported as actively exploited, but stored passwords in local logs can undermine administrative trust. Prioritize validation where NetWare remains operational or connected to sensitive systems. Mitigation focus: Check archived Novell vendor guidance for official remediation or cleanup instructions.; Restrict local access to NIOUTPUT.TXT, NI.LOG, and installation directories.; Remove affected logs if vendor guidance and retention requirements allow deletion..

Prepared

Jun 29, 2026, 18:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.