CVE-2004-2734

CVE-2004-2734 describes a critical access control bypass vulnerability in Novell Web Manager for Novell NetWare 6.5. The flaw stems from an inconsistent case usage in the webadmin-apache.conf file, specifically an uppercase Alias tag conflicting with a lowercase directory tag for a volume. This allows remote attackers to bypass intended access restrictions and gain unauthorized access to the sensitive WEB-INF folder. The vulnerability carries a CVSS score of 10.0, indicating maximum severity with a network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Its FAUCET Risk Score is 82/100, further highlighting its critical nature. Despite its high severity, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also minimal, suggesting it has not garnered significant attention.