CVE-1999-0524

CVE-1999-0524 is an ICMP information-disclosure vulnerability where ICMP replies reveal (1) netmask and (2) timestamp to arbitrary hosts. Connected reports link it to multiple products (e.g., Nutanix AHV advisories NXSA‑AHV series and ABB M2M Gateway plugin) and describe the issue as an informati...

CVE-2011-4191

CVE-2011-4191 describes a stack-based (XNFS.NLM) buffer overflow in Novell NetWare 6.5 SP8’s xdrDecodeString, allowing remote attackers to execute arbitrary code or trigger a denial of service via crafted long packets. Connected sources reinforce the same description across Red Hat, Checkpoint ad...

CVE-2010-4228

The CVE-2010-4228 vulnerability affects Novell NetWare’s NWFTPD.NLM (DELE handling) and is a stack-based buffer overflow: user-supplied DELE data is copied into a fixed-length stack buffer, enabling remote code execution under the super user when authenticated. Affected product: NetWare NWFTPD.NL...

CVE-2004-2104

Technical details for CVE-2004-2104 are not provided in the connected documents; public specifics (affected products, exploit details) are not available here. Monitor for updates.

CVE-2001-1580

CVE-2001-1580 : A directory traversal vulnerability exists in ScriptEase viewcode.jse for NetWare 5.1 before 5.1 SP3, enabling remote attackers to read arbitrary files via ".." sequences in the query string. The vulnerability stems from insufficient input sanitization in the NetWare Web Server’s ...

CVE-2002-1634

CVE-2002-1634 affects Novell NetWare 5.1. The vulnerability is described as an issue where the installation of sample applications could allow remote attackers to obtain sensitive information through eight components: ndsobj.nlm, allfield.jse, websinfo.bas, ndslogin.pl, volscgi.pl, lancgi.pl, tes...

CVE-2000-0669

The CVE-2000-0669 entry describes a vulnerability in Novell NetWare 5.0 where remote attackers can cause a denial of service by flooding port 40193 with random data. The available sources confirm NetWare 5.0 as affected and indicate the impact as a partial availability disruption, with no informa...

CVE-2002-1417

The CVE-2002-1417 entry corresponds to a directory traversal vulnerability in Novell NetBasic Scripting Server (NSN) for NetWare 5.1/6 and Novell Small Business Suite 5.1/6. The OpenVAS NASL entries describe exploitation by substituting a forward or backward slash for %5C in the URL (e.g., nsn/.....

CVE-1999-0929

CVE-1999-0929 affects Novell NetWare running the Novell-HTTP-Server or YAWN web servers. The vulnerability enables remote denial-of-service via a high volume of HTTP GET requests. The connected PT-1999-1471 entry notes affected versions are not specified, and no remediation steps or patch informa...

CVE-2004-2414

Novell NetWare 6.5 SP 1.1 (Overlay CD installation/upgrade with OpenSSH, custom install) stores admin passwords in NIOUTPUT.TXT and NI.LOG during installation. Local users could access these log files and recover passwords, constituting an information-disclosure vulnerability. The vulnerability i...

CVE-2002-1418

The CVE-2002-1418 issue is a buffer overflow in the interpreter of Novell NetBasic Scripting Server (NSN) for Netware 5.1/6 and Novell Small Business Suite 5.1/6, enabling remote attackers to cause a denial of service (ABEND) by sending a long module name. Affected products are specified in the C...

CVE-2000-1246

The CVE-2000-1246 entry refers to NWFTPD.nlm before 5.01o in the Novell NetWare 5.1 SP3 FTP server. It states that remote authenticated users can trigger a denial of service (abend) by sending RNTO after a failed RNFR command. This affects the FTP server component and the vulnerability causes ava...

CVE-2003-0562

NetWare NetWare Enterprise Web Server 5.1/6.0 is vulnerable via the CGI2PERL.NLM PERL handler. A buffer overflow can be triggered by a long URL to /perl/, crashing the server (ABEND) and potentially allowing arbitrary code execution. Public sources describe vulnerable products as NetWare 5.1 SP6 ...

CVE-2002-2432

CVE-2002-2432 describes an unspecified vulnerability in NWFTPD.nlm prior to 5.03b of the Novell NetWare FTP server, allowing remote attackers to cause a denial of service (abend) via a crafted username. The available connected documents corroborate this description across multiple sources (NVD, R...

CVE-2004-2767

CVE-2004-2767 affects NWFTPD.nlm before 5.04.25 in the Novell NetWare FTP server. The flaw is that it does not promptly close DS sessions, allowing remote attackers to exhaust connection slots by opening many FTP sessions that persist for the lifetime of a DS session, causing a denial of service....

CVE-2010-0625

CVE-2010-0625 concerns the Novell NetWare NWFTPD daemon (NWFTPD.nlm/NWFTPD.NLM) with a stack-based buffer overflow when processing long MKD, RMD, RNFR, or DELE commands. Affected products are NetWare 5.1 through 6.5 SP8, with vulnerable NWFTPD before 5.10.01; the issue allows remote authenticated...

CVE-1999-1086

CVE-1999-1086 affects Novell NetWare 5 and earlier when running over IPX with a packet signature level

CVE-1999-1382

CVE-1999-1382 describes a local privilege escalation in NetWare NFS mode 1 and 2. The issue arises when NetWare-NFS implements the Unix Read Only flag by changing a file’s ownership to root, which can be exploited by a local user who creates a setuid program and marks it as Read Only; NetWare-NFS...

CVE-2002-2096

This CVE affects NetWare 5.1 and NetWare 6 where the Novell Remote Manager module (httpstk.nlm) has a buffer overflow vulnerability in which a long username or password can allow remote arbitrary code execution. Root cause is a buffer overflow in httpstk.nlm. The connected sources document this v...

CVE-2003-1592

CVE-2003-1592 corresponds to multiple buffer overflows in NWFTPD.nlm of the Novell NetWare FTP server. Affected products are NetWare 6.0 before SP4 and 6.5 before SP1. The issue allows remote attackers to cause a denial of service (abend) by sending a long username or password. The Red Hat/NVD en...

CVE-2004-2106

CVE-2004-2106 involves the Novell NetWare Enterprise Web Server (versions 5.1 and 6.0). The vulnerability allows remote attackers to list directories by making direct requests to /com/, /com/novell/, /com/novell/webaccess, or /ns-icons/. The available connected documents confirm the affected prod...

CVE-2005-4888

The CVE concerns NWFTPD.nlm in the Novell NetWare FTP server (pre-5.06.04). A remote attacker can cause a denial-of-service by opening many FTP sessions that remain in Not-Logged-In state after each session ends, leading to excessive stale connections. Mitigation: upgrade to version 5.06.04 (or l...

CVE-2002-2433

CVE-2002-2433 affects NWFTPD.nlm in the Novell NetWare FTP server, prior to version 5.03b. A crafted ABOR command can be used by remote authenticated users to trigger an abend/denial of service. Evidence across sources confirms the affected component and the impact as a DoS, with 5.03b cited as t...

CVE-2003-0976

CVE-2003-0976 concerns the NFS Server (XNFS.NLM) component of Novell NetWare 6.5. The issue arises because exports enforcement can be bypassed when using hostname aliases from sys:\etc\hosts, allowing potentially authorized hosts to mount file systems that XNFS should deny. Affected product: NFS ...

CVE-2003-1593

The CVE-2003-1593 entry concerns NWFTPD.nlm in the NetWare FTP server, affected on NetWare 6.0 before SP4 and 6.5 before SP1. The root cause is that domain-name login restrictions are not enforced, allowing remote attackers to bypass access controls via FTP. Public references in the connected doc...

CVE-2003-1595

The vulnerability CVE-2003-1595 affects NWFTPD.nlm in the Novell NetWare 6.5 FTP server, specifically versions before 5.04.05. The root cause is an improper intruder detection mechanism. The public descriptions do not specify the impact in concrete terms or any exploitation vectors; no exploit de...

CVE-2005-2852

The CVE-2005-2852 issue affects the NetWare CIFS.NLM driver (Novell NetWare 6.5 SP2/SP3, 5.1, 6.0). The root cause, per connected docs, is a stack/driver buffer overflow in CIFS.NLM that can be triggered remotely by an incorrect password length, enabling a denial-of-service (ABEND) condition. The...

CVE-2008-5696

CVE-2008-5696 affects NetIQ/NetWare 6.5 prior to Support Pack 8; when an OES2 Linux server is added to the NDS tree, the ApacheAdmin console can be accessed without a password, allowing remote attackers to reconfigure the Apache HTTP Server. The issue is specific to the NetWare/OES2 integration. ...

CVE-1999-1215

CVE-1999-1215 affects LOGIN.EXE in Novell NetWare 4.0/4.01, where credentials are temporarily written to disk, enabling local privilege elevation. Root cause: credentials written to disk by LOGIN.EXE. Impact per CVSS: partial confidentiality, integrity, and availability with local access; exploit...

CVE-1999-1320

Technical details about CVE-1999-1320 are not publicly provided in the supplied documents. No affected products, root cause, or fixes are described here. Monitor for updates.

CVE-2001-1587

Technical details (affected products, vulnerable component, impact, remediation) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2000-1245

The CVE-2000-1245 entry concerns NWFTPD.nlm before version 5.01o in the Novell NetWare 5.1 SP3 FTP server, where remote attackers could bypass restrictions on anonymous access via unspecified vectors. Public documents do not specify the exact attack vectors, affected configurations beyond the ver...

CVE-2003-1594

NWFTPD.nlm in Novell NetWare 6.5 is affected (versions before 5.04.05). The FTP server fails to properly enforce FTPREST.TXT settings, allowing remote attackers to bypass intended access restrictions via an FTP session. Mitigation: upgrade to 5.04.05 or later.

CVE-2006-0997

The CVE-2006-0997 affects the SSL server in NILE.NLM (Novell NetWare 6.5 and Open Enterprise Server). It allows encryption with a NULL key, causing cleartext SSL sessions that can be read by sniffing network traffic. Connected docs confirm the affected component and root cause; no remediation or ...

CVE-2006-0998

The CVE-2006-0998 issue affects Novell NetWare 6.5 and Novell Open Enterprise Server (OES) where the SSL server implementation in NILE.NLM can select a weak cipher instead of an available stronger cipher. This weak cipher choice enables remote attackers to sniff and potentially decrypt SSL sessio...

CVE-2001-1233

Netware Enterprise Web Server 5.1 with GroupWise WebAccess 5.5 and NDS enabled is affected. The vulnerability allows remote attackers to enumerate usernames, group names and other system information by accessing ndsobj.nlm, due to exposure of directory information. CVSS v2.0 base score is 5.0 (AV...

CVE-2002-2434

NWFTPD.nlm before 5.02i in the Novell NetWare FTP server is affected. The vulnerability arises because the FTP service does not properly listen for data connections, enabling a remote attacker to trigger a denial of service (abend) by opening multiple FTP sessions. The public documents (NVD, Red ...

CVE-1999-0265

Technical details about CVE-1999-0265 are not publicly available in the provided connected documents. Monitor for updates from Red Hat, ENISA, or NVD for affected products, versions, and fixes.

CVE-1999-0470

CVE-1999-0470: A weak password encryption algorithm is used by Novell Remote.NLM, allowing passwords to be decrypted. The description from multiple sources confirms the flaw but provides no product-specific fixes or exploit details in the provided documents. The CVSS metrics indicate a network-ex...

CVE-2003-1596

Summary (CVE-2003-1596): NWFTPD.nlm prior to 5.03.12, the FTP server component of Novell NetWare, fails to properly restrict filesystem use by anonymous users with NFS Gateway home directories. This design flaw enables a remote attacker to bypass intended access restrictions through an FTP sessio...

CVE-2005-0819

The CVE-2005-0819 entry concerns the xvesa code in Novell NetWare 6.5 SP2 and SP3. The flaw allows remote attackers to redirect the xsession without authentication via a direct request to GUIMirror/Start. No explicit exploit details, affected versions, or remediation are provided beyond the descr...

CVE-2007-6734

The vulnerability CVE-2007-6734 affects NWFTPD.nlm before 5.08.07 in the NetWare 6.5 SP7 FTP server. The issue is improper implementation of the FTPREST.TXT NOREMOTE restriction, potentially allowing remote authenticated users to access directories outside the home server via unspecified vectors....

CVE-2007-6735

CVE-2007-6735 affects NWFTPD.nlm prior to 5.08.06 on Novell NetWare. The FTP server’s handling of container name matches in FTPREST.TXT is flawed, allowing remote attackers to bypass access restrictions during an FTP session. The issue is rooted in improper partial matching of container names, en...

CVE-1999-1020

CVE-1999-1020 concerns Novell Netware NDS 5.99 where an unauthenticated client can read the NDS tree, exposing sensitive objects (users, groups, etc.) via CX.EXE and NLIST.EXE. Connected sources corroborate an RRD (read) vulnerability enabling tree browsing or unauthenticated access to NDS conten...

CVE-2002-2083

CVE-2002-2083 : The vulnerability affects the Novell Netware client running on Windows 95. Local users can bypass login and open arbitrary files via the "What is this?" help feature accessible from the Netware login screen. The connected documents do not provide details on affected versions beyon...

CVE-2006-1322

The CVE-2006-1322 issue affects Novell Netware NWFTPD 5.06.05. The vulnerability is triggered when an MDTM command paths a target file with an unusually long path, potentially causing a buffer overflow that leads to a denial of service (ABEND). Public documents consistently describe this as a rem...

CVE-2004-2734

The CVE-2004-2734 issue affects Novell Web Manager on NetWare 6.5, where webadmin-apache.conf uses an uppercase Alias tag with a conflicting lowercase directory tag for a volume, enabling remote attackers to bypass access controls on the WEB-INF folder. This is confirmed in the NVD/NVD-derived de...

CVE-2005-1060

Technical details about CVE-2005-1060 are not publicly available in the provided documents. Monitor for updates.

CVE-2005-4887

CVE-2005-4887 affects NWFTPD.nlm in the NetWare 6.5/FTP server prior to version 5.06.05. The vulnerability is described as allowing attackers to cause an unspecified impact via vectors related to passwords. Public sources (NVD, Red Hat, CVE list) corroborate the affected component and version, bu...

CVE-2010-0317

The CVE-2010-0317 issue affects Novell Netware 6.5 SP8. It describes a remote denial-of-service via a flood of malformed AFP/CIFS requests that are not properly handled by CIFS.nlm Semantic Agent (Build 163 MP) 3.27 or AFPTCP.nlm Build 163 SP 3.27. The underlying fault is a NULL pointer dereferen...