913 matches found
CVE-2004-2103
The connected records provide concrete details for CVE-2004-2103 family: Novell GroupWise 6.5 WebAccess (webacc servlet) and related Novell NetWare/WebAccess components are vulnerable to cross-site scripting (XSS) via the User.Id parameter (and URL fields in STYLE elements), with exploitation dem...
CVE-2004-2105
CVE-2004-2105 affects the webacc servlet in Novell NetWare Enterprise Web Server 5.1 and 6.0. An attacker can read arbitrary .htt files by providing a full pathname in the error parameter, indicating a path traversal flaw in error handling. The vulnerability potentially exposes sensitive files (p...
CVE-2004-2103
Cross-site scripting XSS vulnerability in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to process arbitrary script or HTML as other users via 1 a malformed request for a Perl program with script in the filename, 2 the User.id parameter to the webacc servlet, 3 the...
CVE-2004-2104
Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, including the internal IP address, via a direct request to 1 snoop.jsp, 2 SnoopServlet, 3 env.bas, or 4 lcgitest.nlm...
CVE-2004-2104
Technical details for CVE-2004-2104 are not provided in the connected documents; public specifics (affected products, exploit details) are not available here. Monitor for updates.
CVE-2004-2105
The webacc servlet in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to read arbitrary .htt files via a full pathname in the error parameter...
CVE-2004-2106
Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to list directories via a direct request to 1 /com/, 2 /com/novell/, 3 /com/novell/webaccess, or 4 /ns-icons/...
CVE-2004-2106
CVE-2004-2106 involves the Novell NetWare Enterprise Web Server (versions 5.1 and 6.0). The vulnerability allows remote attackers to list directories by making direct requests to /com/, /com/novell/, /com/novell/webaccess, or /ns-icons/. The available connected documents confirm the affected prod...
CVE-2004-2104: Undefined Security Weakness
Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, including the internal IP address, via a direct request to 1 snoop.jsp, 2 SnoopServlet, 3 env.bas, or 4 lcgitest.nlm...
CVE-2004-2106: Undefined Security Weakness
Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to list directories via a direct request to 1 /com/, 2 /com/novell/, 3 /com/novell/webaccess, or 4 /ns-icons/...
CVE-2004-2105: Undefined Security Weakness
The webacc servlet in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to read arbitrary .htt files via a full pathname in the error parameter...
CVE-2004-2103: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to process arbitrary script or HTML as other users via 1 a malformed request for a Perl program with script in the filename, 2 the User.id parameter to the webacc servlet, 3 the...
Moderate: Red Hat Security Advisory: ncpfs security update
An updated ncpfs package is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ncpfs is a file system that understands the Novell NetWareTM NCP protocol. A bug was found in the way ncpfs handled file permissions. ncpfs did not...
RHEL 2.1 : ncpfs (RHSA-2005:371)
An updated ncpfs package is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ncpfs is a file system that understands the Novell NetWareTM NCP protocol. A bug was found in the way ncpfs handled file permissions. ncpfs did not...
CVE-2003-1150
Buffer overflow in the portmapper service PMAP.NLM in Novell NetWare 6 SP3 and ZenWorks for Desktops 3.2 SP2 through 4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown attack vectors...
CVE-2003-1150
The CVE-2003-1150 entry describes a buffer overflow in the PMAP.NLM portmapper of Novell NetWare 6 SP3 and ZenWorks for Desktops 3.2 SP2 through 4.0.1 that could allow a remote attacker to cause a denial of service and potentially execute arbitrary code via unknown attack vectors. No specific exp...
CVE-2003-1150: Undefined Security Weakness
Buffer overflow in the portmapper service PMAP.NLM in Novell NetWare 6 SP3 and ZenWorks for Desktops 3.2 SP2 through 4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown attack vectors...
CVE-2005-0014
Buffer overflow in ncplogin in ncpfs before 2.2.6 allows remote malicious NetWare servers to execute arbitrary code on the NetWare client...
CVE-2005-1060
Unknown vulnerability in the TCP/IP functionality TCPIP.NLM in Novell Netware 6.x allows remote attackers to cause a denial of service ABEND by Page Fault Processor Exception via certain packets...