CVE-2004-2106

Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to list directories via a direct request to 1 /com/, 2 /com/novell/, 3 /com/novell/webaccess, or 4 /ns-icons/...

CVE-2004-2104

Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, including the internal IP address, via a direct request to 1 snoop.jsp, 2 SnoopServlet, 3 env.bas, or 4 lcgitest.nlm...

CVE-2004-2106

CVE-2004-2106 involves the Novell NetWare Enterprise Web Server (versions 5.1 and 6.0). The vulnerability allows remote attackers to list directories by making direct requests to /com/, /com/novell/, /com/novell/webaccess, or /ns-icons/. The available connected documents confirm the affected prod...

CVE-2004-2106: Undefined Security Weakness

Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to list directories via a direct request to 1 /com/, 2 /com/novell/, 3 /com/novell/webaccess, or 4 /ns-icons/...

CVE-2004-2105: Undefined Security Weakness

The webacc servlet in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to read arbitrary .htt files via a full pathname in the error parameter...

CVE-2004-2103: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to process arbitrary script or HTML as other users via 1 a malformed request for a Perl program with script in the filename, 2 the User.id parameter to the webacc servlet, 3 the...

CVE-2004-2104: Undefined Security Weakness

Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, including the internal IP address, via a direct request to 1 snoop.jsp, 2 SnoopServlet, 3 env.bas, or 4 lcgitest.nlm...

Moderate: Red Hat Security Advisory: ncpfs security update

An updated ncpfs package is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ncpfs is a file system that understands the Novell NetWareTM NCP protocol. A bug was found in the way ncpfs handled file permissions. ncpfs did not...

RHEL 2.1 : ncpfs (RHSA-2005:371)

An updated ncpfs package is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ncpfs is a file system that understands the Novell NetWareTM NCP protocol. A bug was found in the way ncpfs handled file permissions. ncpfs did not...

CVE-2003-1150

Buffer overflow in the portmapper service PMAP.NLM in Novell NetWare 6 SP3 and ZenWorks for Desktops 3.2 SP2 through 4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown attack vectors...

CVE-2003-1150

The CVE-2003-1150 entry describes a buffer overflow in the PMAP.NLM portmapper of Novell NetWare 6 SP3 and ZenWorks for Desktops 3.2 SP2 through 4.0.1 that could allow a remote attacker to cause a denial of service and potentially execute arbitrary code via unknown attack vectors. No specific exp...

CVE-2003-1150: Undefined Security Weakness

Buffer overflow in the portmapper service PMAP.NLM in Novell NetWare 6 SP3 and ZenWorks for Desktops 3.2 SP2 through 4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown attack vectors...

CVE-2005-1060

Unknown vulnerability in the TCP/IP functionality TCPIP.NLM in Novell Netware 6.x allows remote attackers to cause a denial of service ABEND by Page Fault Processor Exception via certain packets...

CVE-2005-0014

Buffer overflow in ncplogin in ncpfs before 2.2.6 allows remote malicious NetWare servers to execute arbitrary code on the NetWare client...

CVE-2005-0013

nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows local users to gain privileges...

CVE-2005-0014

Buffer overflow in ncplogin in ncpfs before 2.2.6 allows remote malicious NetWare servers to execute arbitrary code on the NetWare client...

CVE-2005-0819

The xvesa code in Novell Netware 6.5 SP2 and SP3 allows remote attackers to redirect the xsession without authentication via a direct request to GUIMirror/Start...

CVE-2005-1060

Unknown vulnerability in the TCP/IP functionality TCPIP.NLM in Novell Netware 6.x allows remote attackers to cause a denial of service ABEND by Page Fault Processor Exception via certain packets...

CVE-2005-1060

Technical details about CVE-2005-1060 are not publicly available in the provided documents. Monitor for updates.

CVE-2005-1060: Undefined Security Weakness

Unknown vulnerability in the TCP/IP functionality TCPIP.NLM in Novell Netware 6.x allows remote attackers to cause a denial of service ABEND by Page Fault Processor Exception via certain packets...