CVE-2001-1233

Netware Enterprise Web Server 5.1 running GroupWise WebAccess 5.5 with Novell Directory Services NDS enabled allows remote attackers to enumerate user names, group names and other system information by accessing ndsobj.nlm...

CVE-2001-1233

Netware Enterprise Web Server 5.1 with GroupWise WebAccess 5.5 and NDS enabled is affected. The vulnerability allows remote attackers to enumerate usernames, group names and other system information by accessing ndsobj.nlm, due to exposure of directory information. CVSS v2.0 base score is 5.0 (AV...

CVE-2001-1233: Undefined Security Weakness

Netware Enterprise Web Server 5.1 running GroupWise WebAccess 5.5 with Novell Directory Services NDS enabled allows remote attackers to enumerate user names, group names and other system information by accessing ndsobj.nlm...

Buffer overflow in Novell Netware 6 Remote Manager

Buffer overflow in HTTPSTK.NLM and SERVER.NLM modules...

iXsecurity.20020313.nw6remotemanager.a

iXsecurity Security Vulnerability Report No: iXsecurity.20020313.nw6remotemanager.a ========================================== Vulnerability Summary --------------------- Problem: The Netware 6 Remote Manager, which is a web-based interface for managing the server, has a buffer overflow condition...

CVE-1999-1105

CVE-1999-1105 affects Windows 95 when Remote Administration and File Sharing for NetWare Networks is enabled. The vulnerability arises because a share (C$) is created upon remote administrator login, enabling a remote attacker to read arbitrary files by mapping the network drive. The available so...

CVE-1999-1215

CVE-1999-1215 affects LOGIN.EXE in Novell NetWare 4.0/4.01, where credentials are temporarily written to disk, enabling local privilege elevation. Root cause: credentials written to disk by LOGIN.EXE. Impact per CVSS: partial confidentiality, integrity, and availability with local access; exploit...

CVE-2000-0600

Netscape Enterprise Server on NetWare 5.1 is affected by CVE-2000-0600. The vulnerability allows remote attackers to cause a denial of service or to execute arbitrary commands via a malformed URL. The connected sources confirm the affected product and the nature of the impact, but do not provide ...

CVE-2001-0442

The CVE-2001-0442 entry concerns a buffer overflow in the Mercury MTA POP3 server for NetWare 1.48 and earlier. The vulnerability arises from handling a long APOP command, enabling remote attackers to cause a denial of service and potentially execute arbitrary code. The available connected source...

CVE-2000-0600

Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed URL...

CVE-1999-1215

LOGIN.EXE program in Novell Netware 4.0 and 4.01 temporarily writes user name and password information to disk, which could allow local users to gain privileges...

CVE-1999-1320

Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spoofing...

CVE-1999-1382

CVE-1999-1382 describes a local privilege escalation in NetWare NFS mode 1 and 2. The issue arises when NetWare-NFS implements the Unix Read Only flag by changing a file’s ownership to root, which can be exploited by a local user who creates a setuid program and marks it as Read Only; NetWare-NFS...

CVE-1999-1382

NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allows local users to gain root privileges by creating a setuid program and setting it to "Read Only," which NetWare-NFS changes to a setuid root program...

CVE-1999-1105

Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share C$ when an administrator logs in remotely, which allows remote attackers to read arbitrary files by mapping the network drive...

CVE-1999-1320

Technical details about CVE-1999-1320 are not publicly provided in the supplied documents. No affected products, root cause, or fixes are described here. Monitor for updates.

CVE-1999-1320: Undefined Security Weakness

Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spoofing...

CVE-2000-0600: Undefined Security Weakness

Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed URL...

CVE-1999-1105: Undefined Security Weakness

Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share C$ when an administrator logs in remotely, which allows remote attackers to read arbitrary files by mapping the network drive...

CVE-1999-1215: Undefined Security Weakness

LOGIN.EXE program in Novell Netware 4.0 and 4.01 temporarily writes user name and password information to disk, which could allow local users to gain privileges...