Lucene search

K

7 matches found

CVE
CVE
added 2010/04/05 3:30 p.m.48 views

CVE-2000-1246

NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allows remote authenticated users to cause a denial of service (abend) by sending an RNTO command after a failed RNFR command.

3.5CVSS6.6AI score0.01131EPSS
CVE
CVE
added 2010/04/05 4:30 p.m.48 views

CVE-2010-0625

Stack-based buffer overflow in NWFTPD.nlm before 5.10.01 in the FTP server in Novell NetWare 5.1 through 6.5 SP8 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long (1) MKD, (2) RMD, (3) RNFR, or (4) DELE command.

6.5CVSS8.1AI score0.33563EPSS
CVE
CVE
added 2010/04/05 3:30 p.m.47 views

CVE-2002-2433

NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote authenticated users to cause a denial of service (abend) via a crafted ABOR command.

4CVSS6.4AI score0.00383EPSS
CVE
CVE
added 2010/04/05 3:30 p.m.44 views

CVE-2002-2434

NWFTPD.nlm before 5.02i in the FTP server in Novell NetWare does not properly listen for data connections, which allows remote attackers to cause a denial of service (abend) via multiple FTP sessions.

5CVSS6.9AI score0.00428EPSS
CVE
CVE
added 2010/04/05 3:30 p.m.43 views

CVE-2003-1596

NWFTPD.nlm before 5.03.12 in the FTP server in Novell NetWare does not properly restrict filesystem use by anonymous users with NFS Gateway home directories, which allows remote attackers to bypass intended access restrictions via an FTP session.

7.5CVSS7AI score0.00108EPSS
CVE
CVE
added 2010/04/05 3:30 p.m.42 views

CVE-2000-1245

Multiple unspecified vulnerabilities in NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allow remote attackers to bypass intended restrictions on anonymous access via unknown vectors.

7.5CVSS7.2AI score0.00132EPSS
CVE
CVE
added 2010/06/21 7:30 p.m.34 views

CVE-2010-2351

Stack-based buffer overflow in the CIFS.NLM driver in Netware SMB 1.0 for Novell Netware 6.5 SP8 and earlier allows remote attackers to execute arbitrary code via a Sessions Setup AndX packet with a long AccountName.

10CVSS8.4AI score0.14485EPSS