Moderate: Red Hat Security Advisory: ncpfs security update

An updated ncpfs package is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ncpfs is a file system that understands the Novell NetWareTM NCP protocol. A bug was found in the way ncpfs handled file permissions. ncpfs did not...

RHEL 2.1 : ncpfs (RHSA-2005:371)

An updated ncpfs package is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ncpfs is a file system that understands the Novell NetWareTM NCP protocol. A bug was found in the way ncpfs handled file permissions. ncpfs did not...

CVE-2003-1150

Buffer overflow in the portmapper service PMAP.NLM in Novell NetWare 6 SP3 and ZenWorks for Desktops 3.2 SP2 through 4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown attack vectors...

CVE-2003-1150

The CVE-2003-1150 entry describes a buffer overflow in the PMAP.NLM portmapper of Novell NetWare 6 SP3 and ZenWorks for Desktops 3.2 SP2 through 4.0.1 that could allow a remote attacker to cause a denial of service and potentially execute arbitrary code via unknown attack vectors. No specific exp...

CVE-2005-0014

Buffer overflow in ncplogin in ncpfs before 2.2.6 allows remote malicious NetWare servers to execute arbitrary code on the NetWare client...

CVE-2005-1060

Unknown vulnerability in the TCP/IP functionality TCPIP.NLM in Novell Netware 6.x allows remote attackers to cause a denial of service ABEND by Page Fault Processor Exception via certain packets...

CVE-2005-0819

The xvesa code in Novell Netware 6.5 SP2 and SP3 allows remote attackers to redirect the xsession without authentication via a direct request to GUIMirror/Start...

CVE-2005-0014

Buffer overflow in ncplogin in ncpfs before 2.2.6 allows remote malicious NetWare servers to execute arbitrary code on the NetWare client...

CVE-2005-0013

nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows local users to gain privileges...

CVE-2005-1060

Unknown vulnerability in the TCP/IP functionality TCPIP.NLM in Novell Netware 6.x allows remote attackers to cause a denial of service ABEND by Page Fault Processor Exception via certain packets...

CVE-2005-1060

Technical details about CVE-2005-1060 are not publicly available in the provided documents. Monitor for updates.

[SA14874] Novell NetWare Unspecified TCP Packet Handling Denial of Service

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Novell NetWare Unspecified TCP Packet Handling Denial ...

Novell Netware TCP/IP null pointer DoS

No description provided...

possible privilege escalation on Sco OpenServer 5.0.7

i started to play with a vanilla installation of SCO OpenServer 5.0.7 to check the portability of some code a few days ago, and noticed that some binary files were segfaulting if given an arbitrary long input; btw i don't think it's really a problem because most of them were not setuid/setgid, an...

CVE-2002-1634

Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via 1 ndsobj.nlm, 2 allfield.jse, 3 websinfo.bas, 4 ndslogin.pl, 5 volscgi.pl, 6 lancgi.pl, 7 test.jse, or 8 env.pl...

CVE-2002-1634

CVE-2002-1634 affects Novell NetWare 5.1. The vulnerability is described as an issue where the installation of sample applications could allow remote attackers to obtain sensitive information through eight components: ndsobj.nlm, allfield.jse, websinfo.bas, ndslogin.pl, volscgi.pl, lancgi.pl, tes...

Novell NetWare Management Portal Information Disclosure

Binary data 2732.prm...

CVE-2005-0819

The xvesa code in Novell Netware 6.5 SP2 and SP3 allows remote attackers to redirect the xsession without authentication via a direct request to GUIMirror/Start...

CVE-2005-0819

The CVE-2005-0819 entry concerns the xvesa code in Novell NetWare 6.5 SP2 and SP3. The flaw allows remote attackers to redirect the xsession without authentication via a direct request to GUIMirror/Start. No explicit exploit details, affected versions, or remediation are provided beyond the descr...

Novell Netware Xsession Authentication Bypass

No description provided...