Lucene search

[email protected]CVE-2010-0625

HistoryApr 05, 2010 - 4:30 p.m.

CVE-2010-0625

2010-04-0516:30:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2010-0625

buffer overflow

nwftpd.nlm

novell netware

remote authentication

dos

arbitrary code execution

7.8 High

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.309 Low

EPSS

Percentile

96.9%

JSON

Stack-based buffer overflow in NWFTPD.nlm before 5.10.01 in the FTP server in Novell NetWare 5.1 through 6.5 SP8 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long (1) MKD, (2) RMD, (3) RNFR, or (4) DELE command.

CPENameOperatorVersion
novell:netware_ftp_servernovell netware ftp servereq5.01i
novell:netware_ftp_servernovell netware ftp servereq5.01o
novell:netware_ftp_servernovell netware ftp servereq5.01w
novell:netware_ftp_servernovell netware ftp servereq5.01y
novell:netware_ftp_servernovell netware ftp servereq5.02b
novell:netware_ftp_servernovell netware ftp servereq5.02i
novell:netware_ftp_servernovell netware ftp servereq5.02r
novell:netware_ftp_servernovell netware ftp servereq5.02y
novell:netware_ftp_servernovell netware ftp servereq5.03b
novell:netware_ftp_servernovell netware ftp servereq5.03l

CPE	Name	Operator	Version
novell:netware_ftp_server	novell netware ftp server	eq	5.01i
novell:netware_ftp_server	novell netware ftp server	eq	5.01o
novell:netware_ftp_server	novell netware ftp server	eq	5.01w
novell:netware_ftp_server	novell netware ftp server	eq	5.01y
novell:netware_ftp_server	novell netware ftp server	eq	5.02b
novell:netware_ftp_server	novell netware ftp server	eq	5.02i
novell:netware_ftp_server	novell netware ftp server	eq	5.02r
novell:netware_ftp_server	novell netware ftp server	eq	5.02y
novell:netware_ftp_server	novell netware ftp server	eq	5.03b
novell:netware_ftp_server	novell netware ftp server	eq	5.03l

Rows per page:

1-10 of 231

References

secunia.com/advisories/39151

securitytracker.com/id?1023768

www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1

www.protekresearchlab.com/index.php?option=com_content&view=article&id=12&Itemid=12

www.securityfocus.com/archive/1/510353/100/0/threaded

www.securityfocus.com/archive/1/510557/100/0/threaded

www.securityfocus.com/bid/39041

www.vupen.com/english/advisories/2010/0742

www.zerodayinitiative.com/advisories/ZDI-10-062

bugzilla.novell.com/show_bug.cgi?id=569496

7.8 High

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.309 Low

EPSS

Percentile

96.9%

JSON

Related for CVE-2010-0625

checkpoint_advisories1 securityvulns3 prion2 seebug1 zdi1 cve1