[SA14874] Novell NetWare Unspecified TCP Packet Handling Denial of Service

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Novell NetWare Unspecified TCP Packet Handling Denial ...

Novell Netware TCP/IP null pointer DoS

No description provided...

possible privilege escalation on Sco OpenServer 5.0.7

i started to play with a vanilla installation of SCO OpenServer 5.0.7 to check the portability of some code a few days ago, and noticed that some binary files were segfaulting if given an arbitrary long input; btw i don't think it's really a problem because most of them were not setuid/setgid, an...

CVE-2002-1634

Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via 1 ndsobj.nlm, 2 allfield.jse, 3 websinfo.bas, 4 ndslogin.pl, 5 volscgi.pl, 6 lancgi.pl, 7 test.jse, or 8 env.pl...

CVE-2002-1634

CVE-2002-1634 affects Novell NetWare 5.1. The vulnerability is described as an issue where the installation of sample applications could allow remote attackers to obtain sensitive information through eight components: ndsobj.nlm, allfield.jse, websinfo.bas, ndslogin.pl, volscgi.pl, lancgi.pl, tes...

CVE-2002-1634: Undefined Security Weakness

Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via 1 ndsobj.nlm, 2 allfield.jse, 3 websinfo.bas, 4 ndslogin.pl, 5 volscgi.pl, 6 lancgi.pl, 7 test.jse, or 8 env.pl...

Novell NetWare Management Portal Information Disclosure

Binary data 2732.prm...

CVE-2005-0819

The xvesa code in Novell Netware 6.5 SP2 and SP3 allows remote attackers to redirect the xsession without authentication via a direct request to GUIMirror/Start...

CVE-2005-0819

The CVE-2005-0819 entry concerns the xvesa code in Novell NetWare 6.5 SP2 and SP3. The flaw allows remote attackers to redirect the xsession without authentication via a direct request to GUIMirror/Start. No explicit exploit details, affected versions, or remediation are provided beyond the descr...

CVE-2005-0819: Undefined Security Weakness

The xvesa code in Novell Netware 6.5 SP2 and SP3 allows remote attackers to redirect the xsession without authentication via a direct request to GUIMirror/Start...

[SA14611] Novell Netware Xsession Security Bypass

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Novell Netware Xsession Security Bypass SECUNIA ADVISO...

Novell Netware Xsession Authentication Bypass

No description provided...

HP-UX Security patch : PHNE_11722

The remote host is missing HP-UX Security Patch number PHNE11722 . Security Vulnerability in Novell NetWare 3.12 on HP-UX %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17408;...

HP-UX Security patch : PHNE_11723

The remote host is missing HP-UX Security Patch number PHNE11723 . Security Vulnerability in Novell NetWare 3.12 on HP-UX %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16598;...

HP-UX Security patch : PHNE_11724

The remote host is missing HP-UX Security Patch number PHNE11724 . Security Vulnerability in Novell NetWare 3.12 on HP-UX %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16597;...

HP-UX Security patch : PHNE_10341

The remote host is missing HP-UX Security Patch number PHNE10341 . Security Vulnerability in Novell NetWare 3.12 on HP-UX %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17050;...

CVE-2005-0013

CVE-2005-0013 affects nwclient.c in ncpfs prior to version 2.2.6, where root privileges are not dropped before executing NetWare client utilities, enabling local privilege escalation. The vulnerability (base CVSS v2.0 7.2 HIGH) has been addressed by updated ncpfs packages (e.g., 2.2.6) across mul...

CVE-2005-0014

CVE-2005-0014 describes a buffer overflow in the NetWare client’s ncpfs component, specifically in ncplogin, prior to version 2.2.6. The flaw allows remote, unauthenticated attackers on a malicious NetWare server to execute arbitrary code on the affected client. Multiple sources confirm the issue...

CVE-2005-0014

Buffer overflow in ncplogin in ncpfs before 2.2.6 allows remote malicious NetWare servers to execute arbitrary code on the NetWare client...

CVE-2005-0013: Undefined Security Weakness

nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows local users to gain privileges...