Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2003-1593
cve-2003-1593
nwftpd.nlm
ftp server
novell netware
access control
security vulnerability
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.8%
NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 does not enforce domain-name login restrictions, which allows remote attackers to bypass intended access control via an FTP connection.
Affected configurations
Node
novellnetware_ftp_server
novellnetwareMatch6.0
ORnovellnetwareMatch6.0sp1
ORnovellnetwareMatch6.0sp2
ORnovellnetwareMatch6.0sp3
ORnovellnetwareMatch6.5
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.8%
Related for CVE-2003-1593