7 matches found
CVE-2002-2432
CVE-2002-2432 describes an unspecified vulnerability in NWFTPD.nlm prior to 5.03b of the Novell NetWare FTP server, allowing remote attackers to cause a denial of service (abend) via a crafted username. The available connected documents corroborate this description across multiple sources (NVD, R...
CVE-2004-2767
CVE-2004-2767 affects NWFTPD.nlm before 5.04.25 in the Novell NetWare FTP server. The flaw is that it does not promptly close DS sessions, allowing remote attackers to exhaust connection slots by opening many FTP sessions that persist for the lifetime of a DS session, causing a denial of service....
CVE-1999-1382
CVE-1999-1382 describes a local privilege escalation in NetWare NFS mode 1 and 2. The issue arises when NetWare-NFS implements the Unix Read Only flag by changing a file’s ownership to root, which can be exploited by a local user who creates a setuid program and marks it as Read Only; NetWare-NFS...
CVE-2005-4888
The CVE concerns NWFTPD.nlm in the Novell NetWare FTP server (pre-5.06.04). A remote attacker can cause a denial-of-service by opening many FTP sessions that remain in Not-Logged-In state after each session ends, leading to excessive stale connections. Mitigation: upgrade to version 5.06.04 (or l...
CVE-2001-1587
Technical details (affected products, vulnerable component, impact, remediation) are not publicly provided in the supplied documents. Monitor for updates.
CVE-2007-6735
CVE-2007-6735 affects NWFTPD.nlm prior to 5.08.06 on Novell NetWare. The FTP server’s handling of container name matches in FTPREST.TXT is flawed, allowing remote attackers to bypass access restrictions during an FTP session. The issue is rooted in improper partial matching of container names, en...
CVE-2002-2083
CVE-2002-2083 : The vulnerability affects the Novell Netware client running on Windows 95. Local users can bypass login and open arbitrary files via the "What is this?" help feature accessible from the Netware login screen. The connected documents do not provide details on affected versions beyon...