CVE-2007-6735

CVE-2007-6735 affects NWFTPD.nlm prior to 5.08.06 on Novell NetWare. The FTP server’s handling of container name matches in FTPREST.TXT is flawed, allowing remote attackers to bypass access restrictions during an FTP session. The issue is rooted in improper partial matching of container names, en...

CVE-2003-1596

NWFTPD.nlm before 5.03.12 in the FTP server in Novell NetWare does not properly restrict filesystem use by anonymous users with NFS Gateway home directories, which allows remote attackers to bypass intended access restrictions via an FTP session...

CVE-2005-4887

NWFTPD.nlm before 5.06.05 in the FTP server in Novell NetWare 6.5 SP5 allows attackers to have an unspecified impact via vectors related to passwords...

CVE-2002-2432

Unspecified vulnerability in NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote attackers to cause a denial of service abend via a crafted username...

CVE-2003-1593

NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 does not enforce domain-name login restrictions, which allows remote attackers to bypass intended access control via an FTP connection...

CVE-2003-1596

Summary (CVE-2003-1596): NWFTPD.nlm prior to 5.03.12, the FTP server component of Novell NetWare, fails to properly restrict filesystem use by anonymous users with NFS Gateway home directories. This design flaw enables a remote attacker to bypass intended access restrictions through an FTP sessio...

CVE-2003-1594

NWFTPD.nlm in Novell NetWare 6.5 is affected (versions before 5.04.05). The FTP server fails to properly enforce FTPREST.TXT settings, allowing remote attackers to bypass intended access restrictions via an FTP session. Mitigation: upgrade to 5.04.05 or later.

CVE-2007-6734

The vulnerability CVE-2007-6734 affects NWFTPD.nlm before 5.08.07 in the NetWare 6.5 SP7 FTP server. The issue is improper implementation of the FTPREST.TXT NOREMOTE restriction, potentially allowing remote authenticated users to access directories outside the home server via unspecified vectors....

CVE-2007-6734

NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction, which allows remote authenticated users to access directories outside of the home server via unspecified vectors...

CVE-2000-1246

NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allows remote authenticated users to cause a denial of service abend by sending an RNTO command after a failed RNFR command...

CVE-2003-1594

NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly enforce FTPREST.TXT settings, which allows remote attackers to bypass intended access restrictions via an FTP session...

CVE-2003-1591

CVE-2003-1591 affects NWFTPD.nlm in the FTP server of Novell NetWare 6.0 (before SP4) and 6.5 (before SP1). The vulnerability allows user-assisted remote attackers to cause a denial of service (console hang) via a large number of FTP sessions not properly handled during an NLM unload. Connections...

CVE-2003-1593

The CVE-2003-1593 entry concerns NWFTPD.nlm in the NetWare FTP server, affected on NetWare 6.0 before SP4 and 6.5 before SP1. The root cause is that domain-name login restrictions are not enforced, allowing remote attackers to bypass access controls via FTP. Public references in the connected doc...

CVE-2005-4887

CVE-2005-4887 affects NWFTPD.nlm in the NetWare 6.5/FTP server prior to version 5.06.05. The vulnerability is described as allowing attackers to cause an unspecified impact via vectors related to passwords. Public sources (NVD, Red Hat, CVE list) corroborate the affected component and version, bu...

CVE-2001-1587

NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service abend via an anonymous STOU command...

Directory traversal

Directory traversal vulnerability in FTP Server in Apple Mac OS X Server before 10.6.3 allows remote authenticated users to read arbitrary files via crafted filenames...

CVE-2010-0501

Directory traversal vulnerability in FTP Server in Apple Mac OS X Server before 10.6.3 allows remote authenticated users to read arbitrary files via crafted filenames...

CVE-2010-0501

Directory traversal vulnerability in FTP Server in Apple Mac OS X Server before 10.6.3 allows remote authenticated users to read arbitrary files via crafted filenames...

CVE-2010-0501

CVE-2010-0501 describes a directory traversal vulnerability in the FTP Server of Apple Mac OS X Server, affecting versions before Mac OS X Server 10.6.3. An authenticated remote user could read arbitrary files by crafting filenames. The vulnerability is tied to the FTP server component and is add...

Mac OS X FTP Server Directory Traversal

The remote FTP server contains a directory traversal vulnerability that may allow an anonymous user to retrieve files outside the FTP root directory. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid45381; scriptversion"1.13"; scriptcvsdate"Date: 2018/07/14 1:59:35";...