CVE-2005-0014: Undefined Security Weakness

Buffer overflow in ncplogin in ncpfs before 2.2.6 allows remote malicious NetWare servers to execute arbitrary code on the NetWare client...

Mandrake Linux Security Advisory : ncpfs (MDKSA-2005:028)

Erik Sjolund discovered two vulnerabilities in programs bundled with ncpfs. Due to a flaw in nwclient.c, utilities that use the NetWare client functions insecurely access files with elevated privileges CVE-2005-0013, and there is a potentially exploitable buffer overflow in the ncplogin program...

Multiple ncpfs (Novell Netware client for Unix/Linux) bugs

Symbolic links problems during accessing files in user's home with elevated privileges. Buffer overflow with malicious Novell Netware server...

ncpfs: Multiple vulnerabilities

Background ncpfs is a NCP protocol network filesystem driver that allows access to NetWare services, to mount volumes of NetWare servers or print to NetWare print queues. Description Erik Sjolund discovered two vulnerabilities in the programs bundled with ncpfs: there is a potentially exploitable...

Novell Netware CIFS DoS

Error in file protocol handling leads to crash in CIFS.NLM...

[SA13766] Novell Netware CIFS Denial of Service Vulnerability

TITLE: Novell Netware CIFS Denial of Service Vulnerability SECUNIA ADVISORY ID: SA13766 VERIFY ADVISORY: http://secunia.com/advisories/13766/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network OPERATING SYSTEM: Novell Netware 5.x http://secunia.com/product/79/ Novell Netware 6.x...

CVE-2004-2104

Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, including the internal IP address, via a direct request to 1 snoop.jsp, 2 SnoopServlet, 3 env.bas, or 4 lcgitest.nlm...

CVE-2004-2414

Novell NetWare 6.5 SP 1.1, when installing or upgrading using the Overlay CDs and performing a custom installation with OpenSSH, includes sensitive password information in the 1 NIOUTPUT.TXT and 2 NI.LOG log files, which might allow local users to obtain the passwords...

CVE-2004-2106

Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to list directories via a direct request to 1 /com/, 2 /com/novell/, 3 /com/novell/webaccess, or 4 /ns-icons/...

CVE-2004-2105

The webacc servlet in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to read arbitrary .htt files via a full pathname in the error parameter...

CVE-2004-2103

Cross-site scripting XSS vulnerability in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to process arbitrary script or HTML as other users via 1 a malformed request for a Perl program with script in the filename, 2 the User.id parameter to the webacc servlet, 3 the...

[Full-Disclosure] NetWare Screensaver Authentication Bypass From The Local Console

Novacoast Security Advisory Novell Netware 5/5.1/6.0/6.5 Vulnerability Synopsis: Novacoast has discovered a vulnerability in the Novell NetWare Operating System screen saver software. The vulnerability allows a local attacker to bypass authentication and access the system console. Description: Th...

CVE-2002-1436

Novell NetWare Web Server (Netscape/IPlanet) contains a Perl handler that will execute arbitrary code when a POST request is sent to the HTTP endpoint. Affected: NetWare 5.x (up to SP4) and 6.x (up to SP1). Root cause: the Perl handler (for Perl 5.003) processes HTTP POST data in a way that enabl...

CVE-2002-1417

Directory traversal vulnerability in Novell NetBasic Scripting Server NSN for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote attackers to read arbitrary files via a URL containing a "..%5c" sequence modified dot-dot, which is mapped to the directory separator...

CVE-2002-1436

The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary Perl code via an HTTP POST request...

CVE-2002-1437

Directory traversal vulnerability in the web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to read arbitrary files via an HTTP request containing "..%5c" URL-encoded dot-dot backslash sequences...

CVE-2002-1438

The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to obtain Perl version information via the -v option...

CVE-2002-1413

The CVE-2002-1413 issue concerns Novell Netware RCONAG6 (SP2). When RconJ runs in secure mode, using the Secure IP (SSL) option can allow a remote attacker to bypass authentication due to a failure to validate the user password, potentially granting unauthorized access. The CERT entry (VU-746251)...

CVE-2002-1418

The CVE-2002-1418 issue is a buffer overflow in the interpreter of Novell NetBasic Scripting Server (NSN) for Netware 5.1/6 and Novell Small Business Suite 5.1/6, enabling remote attackers to cause a denial of service (ABEND) by sending a long module name. Affected products are specified in the C...

CVE-2002-1418

Buffer overflow in the interpreter for Novell NetBasic Scripting Server NSN for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote attackers to cause a denial of service ABEND via a long module name...