908 matches found
Microsoft Services - 'nwwks.dll' (MS06-066) (Metasploit)
$Id: ms06066nwwks.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
Novell Netware FTP Server Remote Stack Buffer Overflow (CVE-2010-0625)
Novell Netware is a network operating system developed by Novell. It provides file sharing and other services such as printing and email. Netware FTP Server software supplies service for transferring files to and from Netware volumes. File transfers can be performed using any FTP client. A buffer...
Novell NetWare NFS Portmapper RPC Module Stack Overflow
Netware is a network operating system developed by Novell. It provides file sharing and other services such as printing and email. With the inception of the version 3, and the availability of 80386 CPUs, Novell introduced the NLM, or the NetWare Loadable Module architecture. This allowed the...
ZDI-10-062: Novell Netware NWFTPD RMD/RNFR/DELE Argument Parsing Remote Code Execution Vulnerabilities
ZDI-10-062: Novell Netware NWFTPD RMD/RNFR/DELE Argument Parsing Remote Code Execution Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-10-062 April 5, 2010 -- CVE ID: CVE-2010-0625 -- Affected Vendors: Novell -- Affected Products: Novell Netware -- TippingPointTM IPS Customer...
CVE-2010-0625
Stack-based buffer overflow in NWFTPD.nlm before 5.10.01 in the FTP server in Novell NetWare 5.1 through 6.5 SP8 allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a long 1 MKD, 2 RMD, 3 RNFR, or 4 DELE command...
CVE-2010-0625
CVE-2010-0625 concerns the Novell NetWare NWFTPD daemon (NWFTPD.nlm/NWFTPD.NLM) with a stack-based buffer overflow when processing long MKD, RMD, RNFR, or DELE commands. Affected products are NetWare 5.1 through 6.5 SP8, with vulnerable NWFTPD before 5.10.01; the issue allows remote authenticated...
Session fixation
NWFTPD.nlm before 5.08.06 in the FTP server in Novell NetWare does not properly handle partial matches for container names in the FTPREST.TXT file, which allows remote attackers to bypass intended access restrictions via an FTP session...
Design/Logic Flaw
NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction, which allows remote authenticated users to access directories outside of the home server via unspecified vectors...
CVE-2004-2767
NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause a denial of service connection slot exhaustion by establishing many FTP sessions that persist for the lifetime of a DS session...
CVE-2000-1245
Multiple unspecified vulnerabilities in NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allow remote attackers to bypass intended restrictions on anonymous access via unknown vectors...
CVE-2003-1595
NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly perform "intruder detection," which has unspecified impact and attack vectors...
CVE-2007-6735
NWFTPD.nlm before 5.08.06 in the FTP server in Novell NetWare does not properly handle partial matches for container names in the FTPREST.TXT file, which allows remote attackers to bypass intended access restrictions via an FTP session...
CVE-2007-6734
NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction, which allows remote authenticated users to access directories outside of the home server via unspecified vectors...
CVE-2005-4888
NWFTPD.nlm before 5.06.04 in the FTP server in Novell NetWare allows remote attackers to cause a denial of service excessive stale connections by establishing many FTP sessions, which persist in the Not-Logged-In state after each session is completed...
CVE-2001-1587
NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service abend via an anonymous STOU command...
CVE-2002-2434
NWFTPD.nlm before 5.02i in the FTP server in Novell NetWare does not properly listen for data connections, which allows remote attackers to cause a denial of service abend via multiple FTP sessions...
CVE-2007-6735
NWFTPD.nlm before 5.08.06 in the FTP server in Novell NetWare does not properly handle partial matches for container names in the FTPREST.TXT file, which allows remote attackers to bypass intended access restrictions via an FTP session...
CVE-2007-6734
NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction, which allows remote authenticated users to access directories outside of the home server via unspecified vectors...