CVE-2006-6675

Cross-site scripting XSS vulnerability in Novell NetWare 6.5 Support Pack 5 and 6 and Novell Apache on NetWare 2.0.48 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in Welcome web-app...

CVE-2006-6675

CVE-2006-6675 describes an XSS vulnerability in Novell NetWare 6.5 Support Pack 5 and 6, and Novell Apache on NetWare 2.0.48. The issue allows remote attackers to inject arbitrary web script or HTML through unspecified parameters in the Welcome web-app. Public references list affected products an...

[SA23406] Novell NetWare Welcome web-app Cross-Site Scripting Vulnerability

TITLE: Novell NetWare Welcome web-app Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA23406 VERIFY ADVISORY: http://secunia.com/advisories/23406/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote OPERATING SYSTEM: Novell NetWare 6.x http://secunia.com/product/78/...

Novell NetWare Client for Windows EnumPrinters() function vulnerable to buffer overflow

Overview A vulnerability exists in the Novell NetWare client that could allow a remote attacker to execute arbitrary code on an affected system. Description NetWare is a network operating system produced and maintained by Novell. Novell provides NetWare clients for Microsoft Windows and Linux...

CVE-2006-5854

CVE-2006-5854 affects Novell NetWare Client 4.91 through 4.91 SP2. The vulnerability is a buffer overflow in the Spooler service (nwspool.dll) that can be triggered by a long argument to EnumPrinters and OpenPrinter, allowing remote code execution. The initial description specifies arbitrary code...

CVE-2006-5854

Multiple buffer overflows in the Spooler service nwspool.dll in Novell Netware Client 4.91 through 4.91 SP2 allow remote attackers to execute arbitrary code via a long argument to the 1 EnumPrinters and 2 OpenPrinter functions...

Novell Netware Client Print Provider Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of the Novell Netware Client. Authentication is not required to exploit this vulnerability. The specific flaw exists in a print provider installed by the Netware Client. The nwspool.dll...

Do not scan Novell NetWare

The remote host appears to be running Novell NetWare. This operating system has a history of crashing or otherwise being adversely affected by scans. As a result, the scan has been disabled against this host. TRUSTED...

CVE-2006-2185

PORTAL.NLM in Novell Netware 6.5 SP5 writes the username and password in cleartext to the abend.log log file when the groupOperationsMethod function fails, which allows context-dependent attackers to gain privileges...

Default credentials

PORTAL.NLM in Novell Netware 6.5 SP5 writes the username and password in cleartext to the abend.log log file when the groupOperationsMethod function fails, which allows context-dependent attackers to gain privileges...

CVE-2006-2185

The CVE-2006-2185 entry concerns PORTAL.NLM in Novell Netware 6.5 SP5. The authenticated component writes the username and password in cleartext to the abend.log file when groupOperationsMethod fails, enabling a context-dependent attacker with access to log contents to gain privileges. The descri...

[Full-disclosure] Novell NDPS Remote Vulnerability (Server & Client)

Summary: There's an integer overflow present that affects Novell Windows clients and Novell Netware server and Novell Open Enterprise server. Impact: Remote, unauthenticated, super-user privileges. Affected software: Novell Netware All versions Novell Open Enterprise Server All NetWare based...

CVE-2006-2327

Multiple integer overflows in the DPRPC library DPRPCNLM.NLM NDPS/iPrint module in Novell Distributed Print Services in Novell NetWare 6.5 SP3, SP4, and SP5 allow remote attackers to execute arbitrary code via an XDR encoded array with a field that specifies a large number of elements, which...

Integer overflow

Multiple integer overflows in the DPRPC library DPRPCNLM.NLM NDPS/iPrint module in Novell Distributed Print Services in Novell NetWare 6.5 SP3, SP4, and SP5 allow remote attackers to execute arbitrary code via an XDR encoded array with a field that specifies a large number of elements, which...

CVE-2006-2327

CVE-2006-2327 describes multiple integer overflows in the DPRPC library (DPRPCNLM.NLM) within the NDPS/iPrint module of Novell Distributed Print Services on NetWare 6.5 SP3/SP4/SP5. An unauthenticated remote attacker could trigger overflows by sending an XDR-encoded array with a very large elemen...

CVE-2006-2327

Multiple integer overflows in the DPRPC library DPRPCNLM.NLM NDPS/iPrint module in Novell Distributed Print Services in Novell NetWare 6.5 SP3, SP4, and SP5 allow remote attackers to execute arbitrary code via an XDR encoded array with a field that specifies a large number of elements, which...

CVE-2006-0999

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server OES allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow remote attackers to decrypt contents of an SSL...

Design/Logic Flaw

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server OES sometimes selects a weak cipher instead of an available stronger cipher, which makes it easier for remote attackers to sniff and decrypt an SSL protected session...

CVE-2006-0998

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server OES sometimes selects a weak cipher instead of an available stronger cipher, which makes it easier for remote attackers to sniff and decrypt an SSL protected session...

CVE-2006-0997

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server OES permits encryption with a NULL key, which results in cleartext communication that allows remote attackers to read an SSL protected session by sniffing network traffic...