CVE-2003-1592

Multiple buffer overflows in NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allow remote attackers to cause a denial of service abend via a long 1 username or 2 password...

CVE-2003-1596

NWFTPD.nlm before 5.03.12 in the FTP server in Novell NetWare does not properly restrict filesystem use by anonymous users with NFS Gateway home directories, which allows remote attackers to bypass intended access restrictions via an FTP session...

CVE-2000-1245

Multiple unspecified vulnerabilities in NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allow remote attackers to bypass intended restrictions on anonymous access via unknown vectors...

CVE-2003-1591

NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allows user-assisted remote attackers to cause a denial of service console hang via a large number of FTP sessions, which are not properly handled during an NLM unload...

CVE-2003-1593

NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 does not enforce domain-name login restrictions, which allows remote attackers to bypass intended access control via an FTP connection...

CVE-2001-1587

NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service abend via an anonymous STOU command...

CVE-2003-1594

NWFTPD.nlm in Novell NetWare 6.5 is affected (versions before 5.04.05). The FTP server fails to properly enforce FTPREST.TXT settings, allowing remote attackers to bypass intended access restrictions via an FTP session. Mitigation: upgrade to 5.04.05 or later.

CVE-2000-1246

NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allows remote authenticated users to cause a denial of service abend by sending an RNTO command after a failed RNFR command...

CVE-2005-4888

NWFTPD.nlm before 5.06.04 in the FTP server in Novell NetWare allows remote attackers to cause a denial of service excessive stale connections by establishing many FTP sessions, which persist in the Not-Logged-In state after each session is completed...

CVE-2007-6734

NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction, which allows remote authenticated users to access directories outside of the home server via unspecified vectors...

CVE-2003-1591

CVE-2003-1591 affects NWFTPD.nlm in the FTP server of Novell NetWare 6.0 (before SP4) and 6.5 (before SP1). The vulnerability allows user-assisted remote attackers to cause a denial of service (console hang) via a large number of FTP sessions not properly handled during an NLM unload. Connections...

CVE-2007-6735

CVE-2007-6735 affects NWFTPD.nlm prior to 5.08.06 on Novell NetWare. The FTP server’s handling of container name matches in FTPREST.TXT is flawed, allowing remote attackers to bypass access restrictions during an FTP session. The issue is rooted in improper partial matching of container names, en...

CVE-2001-1587

Technical details (affected products, vulnerable component, impact, remediation) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2000-1245

The CVE-2000-1245 entry concerns NWFTPD.nlm before version 5.01o in the Novell NetWare 5.1 SP3 FTP server, where remote attackers could bypass restrictions on anonymous access via unspecified vectors. Public documents do not specify the exact attack vectors, affected configurations beyond the ver...

CVE-2000-1246

The CVE-2000-1246 entry refers to NWFTPD.nlm before 5.01o in the Novell NetWare 5.1 SP3 FTP server. It states that remote authenticated users can trigger a denial of service (abend) by sending RNTO after a failed RNFR command. This affects the FTP server component and the vulnerability causes ava...

CVE-2003-1595

The vulnerability CVE-2003-1595 affects NWFTPD.nlm in the Novell NetWare 6.5 FTP server, specifically versions before 5.04.05. The root cause is an improper intruder detection mechanism. The public descriptions do not specify the impact in concrete terms or any exploitation vectors; no exploit de...

CVE-2002-2433

CVE-2002-2433 affects NWFTPD.nlm in the Novell NetWare FTP server, prior to version 5.03b. A crafted ABOR command can be used by remote authenticated users to trigger an abend/denial of service. Evidence across sources confirms the affected component and the impact as a DoS, with 5.03b cited as t...

CVE-2003-1596

Summary (CVE-2003-1596): NWFTPD.nlm prior to 5.03.12, the FTP server component of Novell NetWare, fails to properly restrict filesystem use by anonymous users with NFS Gateway home directories. This design flaw enables a remote attacker to bypass intended access restrictions through an FTP sessio...

CVE-2003-1592

CVE-2003-1592 corresponds to multiple buffer overflows in NWFTPD.nlm of the Novell NetWare FTP server. Affected products are NetWare 6.0 before SP4 and 6.5 before SP1. The issue allows remote attackers to cause a denial of service (abend) by sending a long username or password. The Red Hat/NVD en...

CVE-2002-2434

NWFTPD.nlm before 5.02i in the Novell NetWare FTP server is affected. The vulnerability arises because the FTP service does not properly listen for data connections, enabling a remote attacker to trigger a denial of service (abend) by opening multiple FTP sessions. The public documents (NVD, Red ...