807 matches found
Novell GroupWise Messenger <= 2.1.0 Memory Corruption
No description provided by source. Luigi Auriemma Application: Novell GroupWise Messenger http://www.novell.com/products/groupwise/ Versions: = 2.1.0 Platforms: Windows, Linux, NetWare Bug: memory corruption Exploitation: remote, versus server Date: 16 Feb 2012 found 10 May 2011 Author: Luigi...
Novell NetWare 5.1/6.0 HTTP Post Arbitrary Perl Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5520/info A vulnerability has been reported in some versions of Novell NetWare. This issue lies in the handling of some HTTP requests when Perl is used as a handler by a web server. Reportedly, it is possible for an...
Novell Netware XNFS caller_name xdrDecodeString Remote Code Execution
No description provided by source. Application: Novell Netware XNFS callername xdrDecodeString Remote Code Execution Vulnerability Platforms: Novell Netware 6.5 SP8 Exploitation: Remote code execution CVE Number: Novell TID: 5117430 ZDI: ZDI-12-11 PRL: 2012-03 Author: Francis Provencher Protek...
Bray Systems Linux Trustees 1.5 Long Pathname Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1096/info Bray Systems Linux Trustees is an access control program which manages user permissions similar to implementations of Netware. Requesting an unusually long file or directory path will cause the application to...
Novell Netware 4.1/4.11 SP5B NDS Default Rights Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/484/info Non-authenticated clients have access to CX.EXE and NLIST.EXE in the SYS:LOGIN directory of a Netware 4.x server. The default root access is set to Read. Therefore, by using various switch options in CX.EXE and...
Novell Netware 4.1/4.11 SP5B Remote.NLM Weak Encryption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/482/info The encrypted passwords for Remote.NLM are remotely accessible to anyone with the ability to view SYS:System\LDRemote.NCF. The password encryption algorithm for Remote.NLM has been broken and can be decrypted wit...
Novell Netware Enterprise Web Server 5.1/6.0 - Multiple XSS Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/9479/info Multiple vulnerabilities have been identified in Novell Netware Enterprise Web Server that may allow an attacker to carry out cross-site scripting attacks, disclose sensitive information, and load potentially...
Novell Netware XNFS.NLM NFS Rename Remote Code Execution
No description provided by source. Application: Novell Netware XNFS.NLM NFS Rename Remote Code Execution Vulnerability Platforms: Novell Netware 6.5 SP8 Exploitation: Remote code execution CVE Number: Novell TID: 5117430 ZDI: ZDI-12-06 PRL: 2012-02 Author: Francis Provencher Protek Research Lab's...
Novell Netware eDirectory - DoS Vulnerability
No description provided by source. nSense Vulnerability Research Security Advisory NSENSE-2011-002 --------------------------------------------------------------- Affected Vendor: Novell Affected Product: Netware, eDirectory Platform: Netware / Linux Impact: Remote Denial of Service Vendor...
Novell NetWare LSASS CIFS.NLM Driver Stack Buffer Overflow
No description provided by source. $Id: lsasscifs.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Novell Netware Enterprise Web Server 5.1/6.0 snoop.jsp Information Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/9479/info Multiple vulnerabilities have been identified in Novell Netware Enterprise Web Server that may allow an attacker to carry out cross-site scripting attacks, disclose sensitive information, and load potentially...
Novell Netware 6.0,eDirectory 8.7 HTTPSTK.NLM Remote Abend Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7841/info It has been reported that the HTTP Stack distributed with Novell Netware and eDirectory does not properly handle some types of malformed packets. Because of this, an attacker may be able to cause a denial of...
Novell NetWare Web Server 2.x convert.bas Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2025/info Novell NetWare Web Server 2.x versions came with a CGI written in BASIC called convert.bas. This script allows retrieval of files outside of the normal web server context. This can be accomplished simply by...
Novell Netware FTP Server DELE Command Stack Buffer Overflow (CVE-2010-4228)
A code execution vulnerability exists in Novell Netware...
Novell Client for Windows 'nicm.sys' 本地权限提升漏洞
BUGTRAQ ID: 60203 Novell Client 工作站软件通过提供对 NetWare 和 Open Enterprise Server OES 的访问,扩展了 Linux 和 Windows 台式机的功能。 Novell Client 2 SP3 for Windows 7/8在处理NICM.SYS内的"NICMIOCTLREQUESTREPLY" 0x143B6B IOCTL请求时存在错误,可导致以内核权限执行任意代码。 0 Novell Client for Windows NT/2000/XP 4.x 厂商补丁: Novell ------...
Unsupported Novell NetWare Operating System
According to its version, the Novell NetWare install on the remote host is no longer supported by its vendor. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. C Tenable Network...
Novell eDirectory NCP Stack Buffer Overflow (CVE-2012-0432)
A stack buffer overflow exists in Novell eDirectory NetWare Core Protocol NCP stack. The vulnerability is due to lack of bounds checking in the KeyedObjectLogin function. A remote attacker could exploit this vulnerability by sending TCP packets with malicious data...
Novell Groupwise Internet Agent LDAP BIND Request Overflow Vulnerability
Exploit for windows platform in category dos / poc Application: Novell Groupwise Platforms: Windows Version: 8.0.2 HP3 and 2012 Secunia: SA50622 PRL: 2012-33 ZDI: ?? Novell TID: 5150711 Author: Francis Provencher Protek Research Lab's Website: http://www.protekresearchlab.com/ Twitter:...