Unprotected Netware Management Portal

The Netware Management Portal software is running on this machine. SPDX-FileCopyrightText: 2001 HD Moore / Digital Defense Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Netware Web Server Sample Page Source Disclosure

On a Netware Web Server, viewcode.jse allows the source code of web pages to be viewed. SPDX-FileCopyrightText: 2002 David Kyger Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Immunity Canvas: MS05_046

Name| ms05046 ---|--- CVE| CVE-2005-1985 Exploit Pack| CANVAS Description| Microsoft Netware Service RPC Overflow Notes| References: http://www.microsoft.com/technet/security/Bulletin/MS05-046.mspx CVE Name: CVE-2005-1985 VENDOR: Microsoft MSADV: MS05-046 Repeatability: One shot Note: Date public...

CVE-2005-1985

The Client Service for NetWare CSNW on Microsoft Windows 2000 SP4, XP SP1 and Sp2, and Server 2003 SP1 and earlier, allows remote attackers to execute arbitrary code due to an "unchecked buffer" when processing certain crafted network messages...

CVE-2005-1985

Summary : CVE-2005-1985 describes a remote code execution vulnerability in the Microsoft Windows Client Service for NetWare (CSNW/Gateway Service for NetWare). Affected products/versions : Windows 2000 SP4, Windows XP SP1/SP2, and Windows Server 2003 SP1 and earlier, where CSNW is installed (by d...

CVE-2005-1985: Undefined Security Weakness

The Client Service for NetWare CSNW on Microsoft Windows 2000 SP4, XP SP1 and Sp2, and Server 2003 SP1 and earlier, allows remote attackers to execute arbitrary code due to an "unchecked buffer" when processing certain crafted network messages...

Microsoft Windows Client Service for NetWare buffer overflow

Buffer overflow in network file srevice...

Microsoft Security Bulletin MS05-046 Vulnerability in the Client Service for NetWare Could Allow Remote Code Execution (899589)

Microsoft Security Bulletin MS05-046 Vulnerability in the Client Service for NetWare Could Allow Remote Code Execution 899589 Published: October 11, 2005 Version: 1.0 Summary Who should read this document: Customers who use the Client or Gateway Service for NetWare Impact of Vulnerability: Remote...

Microsoft NetWare Client Service Crafted Message Code Execution (MS05-046; CVE-2005-1985)

Microsoft's Client Service for Netware provides connectivity infrastructure for Novel Netware systems. A vulnerability was detected in the Client Service for NetWare service for several Microsoft Windows operating systems that can allow remote attackers to execute arbitrary code via a crafted...

MS05-046: Vulnerability in the Client Service for NetWare Could Allow Remote Code Execution (899589)

The remote host contains a version of the Client Service for NetWare that is vulnerable to a buffer overflow. An attacker could exploit this flaw by connecting to the NetWare RPC service possibly over IP and trigger the overflow by sending a malformed RPC request. Tenable Network Security, Inc...

MS05-046: Vulnerability in the Client Service for NetWare Could Allow Remote Code Execution (899589) (uncredentialed check)

The remote host contains a version of the Client Service for NetWare that is vulnerable to a buffer overflow. An attacker may exploit this flaw by connecting to the NetWare RPC service possibly over IP and triggering the overflow by sending a malformed RPC request. C Tenable Network Security, Inc...

CVE-2005-2852

Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a denial of service ABEND via an incorrect password length, as exploited by the "worm.rbot.ccc" worm...

CVE-2005-2852

The CVE-2005-2852 issue affects the NetWare CIFS.NLM driver (Novell NetWare 6.5 SP2/SP3, 5.1, 6.0). The root cause, per connected docs, is a stack/driver buffer overflow in CIFS.NLM that can be triggered remotely by an incorrect password length, enabling a denial-of-service (ABEND) condition. The...

CVE-2005-2852

Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a denial of service ABEND via an incorrect password length, as exploited by the "worm.rbot.ccc" worm...

CVE-2005-2852: Undefined Security Weakness

Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a denial of service ABEND via an incorrect password length, as exploited by the "worm.rbot.ccc" worm...

CVE-2004-2414

Novell NetWare 6.5 SP 1.1, when installing or upgrading using the Overlay CDs and performing a custom installation with OpenSSH, includes sensitive password information in the 1 NIOUTPUT.TXT and 2 NI.LOG log files, which might allow local users to obtain the passwords...

CVE-2004-2414

Novell NetWare 6.5 SP 1.1 (Overlay CD installation/upgrade with OpenSSH, custom install) stores admin passwords in NIOUTPUT.TXT and NI.LOG during installation. Local users could access these log files and recover passwords, constituting an information-disclosure vulnerability. The vulnerability i...

CVE-2004-2414: Undefined Security Weakness

Novell NetWare 6.5 SP 1.1, when installing or upgrading using the Overlay CDs and performing a custom installation with OpenSSH, includes sensitive password information in the 1 NIOUTPUT.TXT and 2 NI.LOG log files, which might allow local users to obtain the passwords...

CVE-2005-2611

VERITAS Backup Exec and NetBackup products are vulnerable to remote file access due to a logic flaw involving hard-coded, static authentication credentials used by the NDMP agent during authentication. Affected software includes Backup Exec for Windows Servers (versions 8.6 through 10.0), Backup ...

CVE-2001-1580

CVE-2001-1580 : A directory traversal vulnerability exists in ScriptEase viewcode.jse for NetWare 5.1 before 5.1 SP3, enabling remote attackers to read arbitrary files via ".." sequences in the query string. The vulnerability stems from insufficient input sanitization in the NetWare Web Server’s ...