PT-2011-1084

Name of the Vulnerable Software and Affected Versions pure-FTPd version 1.0.22 pure-FTPd affected versions not specified, possibly other versions Description The issue allows local users to overwrite arbitrary files via unknown vectors when the Netware OES remote server feature is enabled. This c...

CVE-2011-3171: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possibly other operating systems, when the Netware OES remote server feature is enabled, allows local users to overwrite arbitrary files via unknown vectors...

SuSE 10 Security Update : pure-ftpd (ZYPP Patch Number 7723)

The OES Netware add-ons in pure-ftpd had a security problem and some bugs, which are fixed by this update. A local attacker could overwrite local files when the OES remote server feature of pure-ftpd is enabled due to a directory traversal. CVE-2011-3171 Additionally the following bugs have been...

Novell NetWare 6.5 OpenSSH Remote Stack Buffer Overflow

The version of OpenSSH running on the remote Novell NetWare host has a stack-based buffer overflow vulnerability. When attempting to resolve an absolute path on the server, data is copied into a 512 byte buffer without any bounds checking. A remote, authenticated attacker could exploit this to...

Novell NetWare 6.5 Support Pack 1.1 Admin/Install Local Information Disclosure

According to the list of enumerated software packages, the version of Novel NetWare installed on the remote host may have an information disclosure vulnerability. Admin/install passwords are stored in the NIOUTPUT.TXT and NI.LOG installation log files. A local attacker could exploit this to gain...

Upload directory traversal in Novell ZenWorks Handheld Management 7.0.2

Luigi Auriemma Application: Novell ZenWorks Handheld Management http://www.novell.com/products/zenworks/handhelds/ Versions: = 7.0.2.61213 Platforms: Windows, Linux, NetWare Bug: upload directory traversal Exploitation: remote, versus server Date: 27 Jun 2011 found 25 Apr 2011 Author: Luigi...

Off-by-one in Sybase Advantage Server 10.0.0.3

Luigi Auriemma Application: Sybase Advantage Server http://www.sybase.com/products/databasemanagement/advantagedatabaseserver Versions: = 10.0.0.3 Platforms: Windows, NetWare, Linux Bug: off-by-one Exploitation: remote, versus server Date: 27 Jun 2011 found 29 Oct 2010 Author: Luigi Auriemma...

Sybase Advantage Server 10.0.0.3 - ADS Process Off-by-One Buffer Overflow

Sybase Advantage Server 10.0.0.3 - ADS Process Off-by-One Buffer Overflow source: https://www.securityfocus.com/bid/48464/info Sybase Advantage Server is prone to an off-by-one buffer-overflow vulnerability. Attackers may exploit this issue to execute arbitrary code within the context of the...

Sybase Advantage Server 10.0.0.3 - 'ADS' Process Off-by-One Buffer Overflow

source: https://www.securityfocus.com/bid/48464/info Sybase Advantage Server is prone to an off-by-one buffer-overflow vulnerability. Attackers may exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts may result in a denial-of-servic...

broadcast-novell-locate NSE Script

Attempts to use the Service Location Protocol to discover Novell NetWare Core Protocol NCP servers. Example Usage nmap -sV --script=broadcast-novell-locate Script Output Pre-scan script results: | broadcast-novell-locate: | Tree name: CQURE-LABTREE | Server name: linux-l84t | Addresses |...

Novell Netware AFP Remote Denial of Service

Novell Netware is a network operating system developed by Novell. It provides file sharing and other services such as printing and email. A denial of service vulnerability exists in Novell Netware. An attacker could consistently attack a target system, making it difficult, or impossible, to use t...

Novell Netware XNFS.NLM Stack Buffer Overflow (CVE-2010-4227)

Novell Netware is a network operating system developed by Novell. It provides file sharing and other services such as printing and email. A stack buffer overflow vulnerability exists in Novell Netware product. A remote attacker could trigger this flaw by sending a malicious NFS RPC request to the...

ncp-serverinfo NSE Script

Retrieves eDirectory server information OS version, server name, mounts, etc. from the Novell NetWare Core Protocol NCP service. Example Usage nmap -sV -sC Script Output PORT STATE SERVICE 524/tcp open ncp | ncp-serverinfo: | Server name: LINUX-L84T | Tree Name: IIT-LABTREE | OS Version: 5.70 rev...

Novell eDirectory/Netware LDAP-SSL后台程序漏洞

Novell eDirectory是一个的跨平台的目录服务器。 Novell eDirectory/Netware LDAP-SSL后台程序在实现上存在拒绝服务漏洞，由于系统不恰当地分配用户指定的内存量，攻击者可利用此漏洞造成系统范围内的拒绝服务。 Novell Netware Novell eDirectory 厂商补丁： Novell ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.novell.com/security-alerts !/usr/bin/perl usage: ./novell.pl 10.0.0.1...

Novell LDAP-SSL Daemon Denial Of Service

nSense Vulnerability Research Security Advisory NSENSE-2011-002 --------------------------------------------------------------- Affected Vendor: Novell Affected Product: Netware, eDirectory Platform: Netware / Linux Impact: Remote Denial of Service Vendor response: Patch CVE: None Credit: Knud /...

Novell Netware eDirectory DoS Vulnerability

Exploit for windows platform in category dos / poc nSense Vulnerability Research Security Advisory NSENSE-2011-002 --------------------------------------------------------------- Affected Vendor: Novell Affected Product: Netware, eDirectory Platform: Netware / Linux Impact: Remote Denial of Servi...

Novell eDirectory 8.8 and Netware LDAP-SSL Daemon - Denial of Service

Novell eDirectory 8.8 and Netware LDAP-SSL Daemon - Denial of Service source: https://www.securityfocus.com/bid/47858/info Novell eDirectory and Netware are prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause a system-wide denial-of-service. !/usr/bin/perl...

Novell Netware eDirectory - Denial of Service

Novell Netware eDirectory - Denial of Service nSense Vulnerability Research Security Advisory NSENSE-2011-002 --------------------------------------------------------------- Affected Vendor: Novell Affected Product: Netware, eDirectory Platform: Netware / Linux Impact: Remote Denial of Service...

Novell eDirectoryr / Netware DoS

Memory exhaustion on LDAP-SSL processing...

NSENSE-2011-002: Novell eDirectory/Netware LDAP-SSL daemon

nSense Vulnerability Research Security Advisory NSENSE-2011-002 --------------------------------------------------------------- Affected Vendor: Novell Affected Product: Netware, eDirectory Platform: Netware / Linux Impact: Remote Denial of Service Vendor response: Patch CVE: None Credit: Knud /...