Vulnerabilities > Novell > Netware FTP Server > 5.01y

DATE CVE VULNERABILITY TITLE RISK
2010-04-05 CVE-2010-0625 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Novell Netware and Netware FTP Server
Stack-based buffer overflow in NWFTPD.nlm before 5.10.01 in the FTP server in Novell NetWare 5.1 through 6.5 SP8 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long (1) MKD, (2) RMD, (3) RNFR, or (4) DELE command.
network
low complexity
novell CWE-119
6.5
2010-04-05 CVE-2005-4887 Remote Security vulnerability in Netware FTP Server
NWFTPD.nlm before 5.06.05 in the FTP server in Novell NetWare 6.5 SP5 allows attackers to have an unspecified impact via vectors related to passwords.
network
low complexity
novell
7.5
2010-04-05 CVE-2003-1596 Permissions, Privileges, and Access Controls vulnerability in Novell Netware and Netware FTP Server
NWFTPD.nlm before 5.03.12 in the FTP server in Novell NetWare does not properly restrict filesystem use by anonymous users with NFS Gateway home directories, which allows remote attackers to bypass intended access restrictions via an FTP session.
network
low complexity
novell CWE-264
7.5
2010-04-05 CVE-2002-2434 Denial-Of-Service vulnerability in Netware
NWFTPD.nlm before 5.02i in the FTP server in Novell NetWare does not properly listen for data connections, which allows remote attackers to cause a denial of service (abend) via multiple FTP sessions.
network
low complexity
novell
5.0
2010-04-05 CVE-2002-2433 Improper Input Validation vulnerability in Novell Netware and Netware FTP Server
NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote authenticated users to cause a denial of service (abend) via a crafted ABOR command.
network
low complexity
novell CWE-20
4.0
2010-04-05 CVE-2002-2432 Denial-Of-Service vulnerability in Netware FTP Server
Unspecified vulnerability in NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (abend) via a crafted username.
network
low complexity
novell
5.0