HP-UX Security patch : PHNE_11723

The remote host is missing HP-UX Security Patch number PHNE11723 . Security Vulnerability in Novell NetWare 3.12 on HP-UX %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16598;...

CVE-2005-0013

CVE-2005-0013 affects nwclient.c in ncpfs prior to version 2.2.6, where root privileges are not dropped before executing NetWare client utilities, enabling local privilege escalation. The vulnerability (base CVSS v2.0 7.2 HIGH) has been addressed by updated ncpfs packages (e.g., 2.2.6) across mul...

CVE-2005-0014

CVE-2005-0014 describes a buffer overflow in the NetWare client’s ncpfs component, specifically in ncplogin, prior to version 2.2.6. The flaw allows remote, unauthenticated attackers on a malicious NetWare server to execute arbitrary code on the affected client. Multiple sources confirm the issue...

CVE-2005-0014

Buffer overflow in ncplogin in ncpfs before 2.2.6 allows remote malicious NetWare servers to execute arbitrary code on the NetWare client...

CVE-2005-0013: Undefined Security Weakness

nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows local users to gain privileges...

CVE-2005-0014: Undefined Security Weakness

Buffer overflow in ncplogin in ncpfs before 2.2.6 allows remote malicious NetWare servers to execute arbitrary code on the NetWare client...

Mandrake Linux Security Advisory : ncpfs (MDKSA-2005:028)

Erik Sjolund discovered two vulnerabilities in programs bundled with ncpfs. Due to a flaw in nwclient.c, utilities that use the NetWare client functions insecurely access files with elevated privileges CVE-2005-0013, and there is a potentially exploitable buffer overflow in the ncplogin program...

Multiple ncpfs (Novell Netware client for Unix/Linux) bugs

Symbolic links problems during accessing files in user's home with elevated privileges. Buffer overflow with malicious Novell Netware server...

ncpfs: Multiple vulnerabilities

Background ncpfs is a NCP protocol network filesystem driver that allows access to NetWare services, to mount volumes of NetWare servers or print to NetWare print queues. Description Erik Sjolund discovered two vulnerabilities in the programs bundled with ncpfs: there is a potentially exploitable...

[SA13766] Novell Netware CIFS Denial of Service Vulnerability

TITLE: Novell Netware CIFS Denial of Service Vulnerability SECUNIA ADVISORY ID: SA13766 VERIFY ADVISORY: http://secunia.com/advisories/13766/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network OPERATING SYSTEM: Novell Netware 5.x http://secunia.com/product/79/ Novell Netware 6.x...

Novell Netware CIFS DoS

Error in file protocol handling leads to crash in CIFS.NLM...

CVE-2004-2103

Cross-site scripting XSS vulnerability in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to process arbitrary script or HTML as other users via 1 a malformed request for a Perl program with script in the filename, 2 the User.id parameter to the webacc servlet, 3 the...

CVE-2004-2105

The webacc servlet in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to read arbitrary .htt files via a full pathname in the error parameter...

CVE-2004-2104

Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, including the internal IP address, via a direct request to 1 snoop.jsp, 2 SnoopServlet, 3 env.bas, or 4 lcgitest.nlm...

CVE-2004-2414

Novell NetWare 6.5 SP 1.1, when installing or upgrading using the Overlay CDs and performing a custom installation with OpenSSH, includes sensitive password information in the 1 NIOUTPUT.TXT and 2 NI.LOG log files, which might allow local users to obtain the passwords...

CVE-2004-2106

Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to list directories via a direct request to 1 /com/, 2 /com/novell/, 3 /com/novell/webaccess, or 4 /ns-icons/...

[Full-Disclosure] NetWare Screensaver Authentication Bypass From The Local Console

Novacoast Security Advisory Novell Netware 5/5.1/6.0/6.5 Vulnerability Synopsis: Novacoast has discovered a vulnerability in the Novell NetWare Operating System screen saver software. The vulnerability allows a local attacker to bypass authentication and access the system console. Description: Th...

CVE-2002-1418

The CVE-2002-1418 issue is a buffer overflow in the interpreter of Novell NetBasic Scripting Server (NSN) for Netware 5.1/6 and Novell Small Business Suite 5.1/6, enabling remote attackers to cause a denial of service (ABEND) by sending a long module name. Affected products are specified in the C...

CVE-2002-1438

CVE-2002-1438 affects Novell NetWare 5.1/6 with Perl 5.003; the web handler discloses the Perl version via -v, causing information disclosure. The OpenVAS/Nessus entries describe broader NetWare Perl-related issues (code execution via HTTP POST) for 5.x/6.x, but the CVE itself is limited to versi...

CVE-2002-1437

Directory traversal vulnerability in the web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to read arbitrary files via an HTTP request containing "..%5c" URL-encoded dot-dot backslash sequences...