CVE-2007-6735

CVE-2007-6735 affects NWFTPD.nlm prior to 5.08.06 on Novell NetWare. The FTP server’s handling of container name matches in FTPREST.TXT is flawed, allowing remote attackers to bypass access restrictions during an FTP session. The issue is rooted in improper partial matching of container names, en...

CVE-2003-1593

NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 does not enforce domain-name login restrictions, which allows remote attackers to bypass intended access control via an FTP connection...

CVE-2003-1595

NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly perform "intruder detection," which has unspecified impact and attack vectors...

CVE-2003-1596

NWFTPD.nlm before 5.03.12 in the FTP server in Novell NetWare does not properly restrict filesystem use by anonymous users with NFS Gateway home directories, which allows remote attackers to bypass intended access restrictions via an FTP session...

CVE-2004-2767

NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause a denial of service connection slot exhaustion by establishing many FTP sessions that persist for the lifetime of a DS session...

CVE-2003-1595

The vulnerability CVE-2003-1595 affects NWFTPD.nlm in the Novell NetWare 6.5 FTP server, specifically versions before 5.04.05. The root cause is an improper intruder detection mechanism. The public descriptions do not specify the impact in concrete terms or any exploitation vectors; no exploit de...

CVE-2003-1596

Summary (CVE-2003-1596): NWFTPD.nlm prior to 5.03.12, the FTP server component of Novell NetWare, fails to properly restrict filesystem use by anonymous users with NFS Gateway home directories. This design flaw enables a remote attacker to bypass intended access restrictions through an FTP sessio...

CVE-2000-1245

Multiple unspecified vulnerabilities in NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allow remote attackers to bypass intended restrictions on anonymous access via unknown vectors...

CVE-2003-1591

NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allows user-assisted remote attackers to cause a denial of service console hang via a large number of FTP sessions, which are not properly handled during an NLM unload...

CVE-2005-4887

NWFTPD.nlm before 5.06.05 in the FTP server in Novell NetWare 6.5 SP5 allows attackers to have an unspecified impact via vectors related to passwords...

CVE-2005-4887

CVE-2005-4887 affects NWFTPD.nlm in the NetWare 6.5/FTP server prior to version 5.06.05. The vulnerability is described as allowing attackers to cause an unspecified impact via vectors related to passwords. Public sources (NVD, Red Hat, CVE list) corroborate the affected component and version, bu...

CVE-2001-1587

NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service abend via an anonymous STOU command...

CVE-2003-1594

NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly enforce FTPREST.TXT settings, which allows remote attackers to bypass intended access restrictions via an FTP session...

CVE-2003-1593

The CVE-2003-1593 entry concerns NWFTPD.nlm in the NetWare FTP server, affected on NetWare 6.0 before SP4 and 6.5 before SP1. The root cause is that domain-name login restrictions are not enforced, allowing remote attackers to bypass access controls via FTP. Public references in the connected doc...

CVE-2002-2432

CVE-2002-2432 describes an unspecified vulnerability in NWFTPD.nlm prior to 5.03b of the Novell NetWare FTP server, allowing remote attackers to cause a denial of service (abend) via a crafted username. The available connected documents corroborate this description across multiple sources (NVD, R...

CVE-2000-1246

NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allows remote authenticated users to cause a denial of service abend by sending an RNTO command after a failed RNFR command...

CVE-2002-2433

NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote authenticated users to cause a denial of service abend via a crafted ABOR command...

CVE-2007-6734

NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction, which allows remote authenticated users to access directories outside of the home server via unspecified vectors...

CVE-2003-1591

CVE-2003-1591 affects NWFTPD.nlm in the FTP server of Novell NetWare 6.0 (before SP4) and 6.5 (before SP1). The vulnerability allows user-assisted remote attackers to cause a denial of service (console hang) via a large number of FTP sessions not properly handled during an NLM unload. Connections...

Novell Netware FTP Remote Stack Overflow

No description provided by source. Application: Novell Netware FTP Remote Stack Overflow Platforms: Novell Netware 6.5 SP8 Exploitation: Remote Code Execution CVE Number: CVE-2010-0625 Novell TID: 3238588 Discover Date: 2009-07-23 Author: Francis Provencher Protek Research Lab's Blog:...