CVE-2006-0998

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server OES sometimes selects a weak cipher instead of an available stronger cipher, which makes it easier for remote attackers to sniff and decrypt an SSL protected session...

CVE-2006-0999

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server OES allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow remote attackers to decrypt contents of an SSL...

CVE-2006-0999

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server OES allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow remote attackers to decrypt contents of an SSL...

CVE-2006-0997

The CVE-2006-0997 affects the SSL server in NILE.NLM (Novell NetWare 6.5 and Open Enterprise Server). It allows encryption with a NULL key, causing cleartext SSL sessions that can be read by sniffing network traffic. Connected docs confirm the affected component and root cause; no remediation or ...

CVE-2006-0997

The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server OES permits encryption with a NULL key, which results in cleartext communication that allows remote attackers to read an SSL protected session by sniffing network traffic...

CVE-2006-0998

The CVE-2006-0998 issue affects Novell NetWare 6.5 and Novell Open Enterprise Server (OES) where the SSL server implementation in NILE.NLM can select a weak cipher instead of an available stronger cipher. This weak cipher choice enables remote attackers to sniff and potentially decrypt SSL sessio...

CVE-2006-0999

CVE-2006-0999 affects the SSL server in Novell NetWare 6.5 and Novell Open Enterprise Server (OES), where NILE.NLM can be coerced to use a weak cipher for compatibility. This could allow an attacker to decrypt content of SSL sessions by forcing weaker encryption. The description does not specify ...

Buffer overflow

Novell Netware NWFTPD 5.06.05 allows remote attackers to cause a denial of service ABEND via an MDTM command that uses a long path for the target file, possibly due to a buffer overflow...

CVE-2006-1322

The CVE-2006-1322 issue affects Novell Netware NWFTPD 5.06.05. The vulnerability is triggered when an MDTM command paths a target file with an unusually long path, potentially causing a buffer overflow that leads to a denial of service (ABEND). Public documents consistently describe this as a rem...

Design/Logic Flaw

Unspecified vulnerability in Veritas Backup Exec for Windows Server Remote Agent 9.1 through 10.1, for Netware Servers and Remote Agent 9.1 and 9.2, and Remote Agent for Linux Servers 10.0 and 10.1 allow attackers to cause a denial of service application crash or unavailability due to "memory...

NWFTPD Novell Netware FTP Server DoS

No description provided...

[SA19265] Novell NetWare NWFTPD Potential Denial of Service Vulnerability

TITLE: Novell NetWare NWFTPD Potential Denial of Service Vulnerability SECUNIA ADVISORY ID: SA19265 VERIFY ADVISORY: http://secunia.com/advisories/19265/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: Novell NetWare 6.x http://secunia.com/product/78/ DESCRIPTION: A...

Symantec Security Advisory SYM06-004

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Security Advisory SYM06-004 17 March 2006 Veritas Backup Exec: Application Memory Denial of Service Revision History None Severity Medium Remote Access - Yes Local Access - No Authentication Required -No Exploit publicly available - No Overvi...

Unprotected Netware Management Portal

The Netware Management Portal software is running on this machine. The Portal allows anyone to view the current server configuration and locate other Portal servers on the network. It is possible to browse the server's filesystem by requesting the volume in the URL. However, a valid user account ...

Novell Netbasic Scripting Server Directory Traversal

Novell Netbasic Scripting Server Directory Traversal It is possible to escape out of the root directory of the scripting server by substituting a forward or backward slash for %5C. As a result, system information, such as environment and user information, could be obtained from the Netware server...

Default Novonyx Web Server Files

Novell Netware default Novonyx web server files. A default installation of Novell 5.x will install the Novonyx web server. Numerous web server files included with this installation could reveal system information. OpenVAS Vulnerability Test $Id: novellnovonyxdefaultfiles.nasl 8023 2017-12-07...

Novell NetWare HTTP POST Perl Code Execution Vulnerability

Novell Netware contains multiple default web server installations. The Netware Enterprise Web Server Netscape/IPlanet has a perl handler which will run arbitrary code given to in a POST request version 5.x through SP4 and 6.x through SP1 are effected. OpenVAS Vulnerability Test $Id:...

Netware Perl CGI overflow

The remote web server crashes when it receives a too long URL for the Perl handler. It might be possible to make it execute arbitrary code through this flaw. See http://support.novell.com/servlet/tidfinder/2966549 OpenVAS Vulnerability Test $Id: netwareperloverflow.nasl 8023 2017-12-07 08:36:26Z...

Novell Netbasic Scripting Server Directory Traversal

Novell Netbasic Scripting Server is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2004 David Kyger Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Netware Perl CGI Overflow DoS Vulnerability

The remote web server crashes when it receives a too long URL for the Perl handler. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...