NOVL-2002-2963081 - Novell iManager (eMFrame 1.2.1) DoS Attack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 For Immediate Disclosure ============================== Summary ============================== Security Alert: NOVL-2002-2963081 Title: Novell iManager eMFrame 1.2.1 DoS Attack Date: 12 Aug 2002 Revision: 1 Product Name: Novell iManager OS/Platforms:...

CVE-2002-0791

Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service CPU consumption via a connection to the server followed by a carriage return, and possibly other invalid commands with improper syntax or length...

DEBIAN-CVE-2002-0661

Directory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to read arbitrary files and execute commands via .. dot dot sequences containing \ backslash characters...

CVE-2002-0661

Directory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to read arbitrary files and execute commands via .. dot dot sequences containing \ backslash characters...

CVE-2002-0661: Undefined Security Weakness

Directory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to read arbitrary files and execute commands via .. dot dot sequences containing \ backslash characters...

Apache Httpd < 2.0.40 : Path vulnerability

Certain URIs would bypass security and allow users to invoke or access any file depending on the system configuration. Affects Windows, OS2, Netware and Cygwin platforms only...

TCP/IP Initial Sequence Number (ISN) Reuse Weakness

The remote host seems to generate Initial Sequence Numbers ISN in a weak manner which seems to solely depend on the source and dest port of the TCP packets. An attacker may exploit this flaw to establish spoofed connections to the remote host. The Raptor Firewall and Novell NetWare are known to b...

CVE-2002-0791

CVE-2002-0791 affects the Novell NetWare NWFTPD server. NWFTPD versions before 5.02r are vulnerable to remote DoS: an attacker can establish a connection and then send a carriage return plus possibly other invalid commands with improper syntax/length, causing CPU consumption. Documented impact is...

CVE-2002-0791

Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service CPU consumption via a connection to the server followed by a carriage return, and possibly other invalid commands with improper syntax or length...

CVE-2002-0791: Undefined Security Weakness

Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service CPU consumption via a connection to the server followed by a carriage return, and possibly other invalid commands with improper syntax or length...

pwc.20020630.nims_3.0.3_imapd.a

PricewaterhouseCoopers Security Vulnerability Report No: pwc.20020630.nims3.0.3imapd.a ==================================================== Vulnerability Summary --------------------- Problem: Multiple buffer overflow conditions have been identified in Novell Netmail IMAP service. Threat: Denial ...

Cluestick Advisory #001

Cluestick Advisory 001 June 27, the year of our Lord 2002 Surreal "Unauthenticated remote hyper-annoying denial of service with a side of server reboot, using IManage. Netware 6.0 and NW6 SP1." OK, I may possibly ramble a bit, but is that any reason to SHUN a body? It's been 30 to 45 days, and I'...

cqure.net.20020521.netware_nwftpd_fmtstr

cqure.net Security Vulnerability Report No: cqure.net.20020521.netwarenwftpdfmtstr ============================================ Vulnerability Summary --------------------- Problem: The Netware FTP server has a DOS vulnerability. Threat: An attacker could cause the FTP server to ABEND resulting in...

Format string bug in Netware ftpd

Format string bug in username...

Novell NetWare default installation contains sample files that disclose sensitive server information

Overview Novell NetWare 5.1 is a network management operating system that enables access to files, printers, directories, email, databases, and other network interfaces, as well as providing a web interface. There is an insecure default configuration that places several sample applications in the...

Novell NetWare ncp Service NDS Object Enumeration

This host is a Novell NetWare eDirectory server, and has browse rights on the PUBLIC object. It is possible to enumerate all NDS objects, including users, with crafted queries. An attacker can use this to gain information about this host. This script was written by Forrest Rae See the Nessus...

Multiple bugs in Novell Netware and utilities

No description provided...

cqure.net.20020408.netware_nwftpd.a

cqure.net Security Vulnerability Report No: cqure.net.20020408.netwarenwftpd.a ======================================== Vulnerability Summary --------------------- Problem: The Netware FTP server has a DOS vulnerability. Threat: An attacker could cause the server cpu to spike at 100 cpu hogging t...

cqure.net.20020412.netware_client.a

cqure.net Security Vulnerability Report No: cqure.net.20020412.netwareclient.a ======================================== Vulnerability Summary --------------------- Problem: Multiple buffer overflow conditions exist in the Novell Netware client for Windows. Threat: An attacker could crash any...

cqure.net.20020412.netware_sdmr.a

cqure.net Security Vulnerability Report No: cqure.net.20020412.netwaresdmr.a ======================================== Vulnerability Summary --------------------- Problem: The IPX compatibility issue Posted to BugTraq on July 11, 2000 by Dimuthu Parussalla applies to Netware 6.0 SP 1 as well...