CVE-2007-6734

The vulnerability CVE-2007-6734 affects NWFTPD.nlm before 5.08.07 in the NetWare 6.5 SP7 FTP server. The issue is improper implementation of the FTPREST.TXT NOREMOTE restriction, potentially allowing remote authenticated users to access directories outside the home server via unspecified vectors....

CVE-2003-1595

NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly perform "intruder detection," which has unspecified impact and attack vectors...

CVE-2000-1245

Multiple unspecified vulnerabilities in NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allow remote attackers to bypass intended restrictions on anonymous access via unknown vectors...

CVE-2005-4887

NWFTPD.nlm before 5.06.05 in the FTP server in Novell NetWare 6.5 SP5 allows attackers to have an unspecified impact via vectors related to passwords...

CVE-2003-1596

Summary (CVE-2003-1596): NWFTPD.nlm prior to 5.03.12, the FTP server component of Novell NetWare, fails to properly restrict filesystem use by anonymous users with NFS Gateway home directories. This design flaw enables a remote attacker to bypass intended access restrictions through an FTP sessio...

CVE-2003-1591

NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allows user-assisted remote attackers to cause a denial of service console hang via a large number of FTP sessions, which are not properly handled during an NLM unload...

CVE-2004-2767

NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause a denial of service connection slot exhaustion by establishing many FTP sessions that persist for the lifetime of a DS session...

CVE-2005-4888

The CVE concerns NWFTPD.nlm in the Novell NetWare FTP server (pre-5.06.04). A remote attacker can cause a denial-of-service by opening many FTP sessions that remain in Not-Logged-In state after each session ends, leading to excessive stale connections. Mitigation: upgrade to version 5.06.04 (or l...

CVE-2003-1594

NWFTPD.nlm in Novell NetWare 6.5 is affected (versions before 5.04.05). The FTP server fails to properly enforce FTPREST.TXT settings, allowing remote attackers to bypass intended access restrictions via an FTP session. Mitigation: upgrade to 5.04.05 or later.

CVE-2003-1595

The vulnerability CVE-2003-1595 affects NWFTPD.nlm in the Novell NetWare 6.5 FTP server, specifically versions before 5.04.05. The root cause is an improper intruder detection mechanism. The public descriptions do not specify the impact in concrete terms or any exploitation vectors; no exploit de...

CVE-2007-6734

NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction, which allows remote authenticated users to access directories outside of the home server via unspecified vectors...

CVE-2002-2433

NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote authenticated users to cause a denial of service abend via a crafted ABOR command...

CVE-2000-1246

NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allows remote authenticated users to cause a denial of service abend by sending an RNTO command after a failed RNFR command...

CVE-2001-1587

NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service abend via an anonymous STOU command...

CVE-2003-1593

The CVE-2003-1593 entry concerns NWFTPD.nlm in the NetWare FTP server, affected on NetWare 6.0 before SP4 and 6.5 before SP1. The root cause is that domain-name login restrictions are not enforced, allowing remote attackers to bypass access controls via FTP. Public references in the connected doc...

CVE-2003-1591

CVE-2003-1591 affects NWFTPD.nlm in the FTP server of Novell NetWare 6.0 (before SP4) and 6.5 (before SP1). The vulnerability allows user-assisted remote attackers to cause a denial of service (console hang) via a large number of FTP sessions not properly handled during an NLM unload. Connections...

CVE-2005-4887

CVE-2005-4887 affects NWFTPD.nlm in the NetWare 6.5/FTP server prior to version 5.06.05. The vulnerability is described as allowing attackers to cause an unspecified impact via vectors related to passwords. Public sources (NVD, Red Hat, CVE list) corroborate the affected component and version, bu...

CVE-2002-2432

CVE-2002-2432 describes an unspecified vulnerability in NWFTPD.nlm prior to 5.03b of the Novell NetWare FTP server, allowing remote attackers to cause a denial of service (abend) via a crafted username. The available connected documents corroborate this description across multiple sources (NVD, R...

CVE-2005-4888: Undefined Security Weakness

NWFTPD.nlm before 5.06.04 in the FTP server in Novell NetWare allows remote attackers to cause a denial of service excessive stale connections by establishing many FTP sessions, which persist in the Not-Logged-In state after each session is completed...

CVE-2007-6734: Undefined Security Weakness

NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction, which allows remote authenticated users to access directories outside of the home server via unspecified vectors...