Lucene search

K
nvd[email protected]NVD:CVE-2003-1593
HistoryApr 05, 2010 - 3:30 p.m.

CVE-2003-1593

2010-04-0515:30:00
CWE-264
web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.8%

NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 does not enforce domain-name login restrictions, which allows remote attackers to bypass intended access control via an FTP connection.

Affected configurations

NVD
Node
novellnetware_ftp_server
AND
novellnetwareMatch6.0
OR
novellnetwareMatch6.0sp1
OR
novellnetwareMatch6.0sp2
OR
novellnetwareMatch6.0sp3
OR
novellnetwareMatch6.5

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.8%

Related for NVD:CVE-2003-1593