Vulnerabilities > Novell > Medium

DATE CVE VULNERABILITY TITLE RISK
2004-11-23 CVE-2004-0081 OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool. 5.0
2004-01-15 CVE-2005-1247 Denial-Of-Service vulnerability in Novell Nsure Audit 1.0.1
webadmin.exe in Novell Nsure Audit 1.0.1 allows remote attackers to cause a denial of service via malformed ASN.1 packets in corrupt client certificates to an SSL server, as demonstrated using an exploit for the OpenSSL ASN.1 parsing vulnerability.
network
low complexity
novell
5.0
2003-08-27 CVE-2003-0639 Remote Security vulnerability in Novell Ichain 2.1
Unknown vulnerability in Novell iChain 2.2 before Support Pack 1 allows users to access restricted or secure pages without authentication.
network
low complexity
novell
5.0
2003-08-27 CVE-2003-0635 Remote Security vulnerability in Novell Ichain 2.2
Unknown vulnerability or vulnerabilities in Novell iChain 2.2 before Support Pack 1, with unknown impact, possibly related to unauthorized access to (1) NCPIP.NLM and (2) JSTCP.NLM.
network
low complexity
novell
5.0
2003-08-27 CVE-2003-0562 Unspecified vulnerability in Novell Netware 5.1/6.0
Buffer overflow in the CGI2PERL.NLM PERL handler in Novell Netware 5.1 and 6.0 allows remote attackers to cause a denial of service (ABEND) via a long input string.
network
low complexity
novell
5.0
2003-04-11 CVE-2002-1438 Remote Perl Version Disclosure vulnerability in Novell Netware 5.1/6.0
The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to obtain Perl version information via the -v option.
network
low complexity
novell
5.0
2003-04-11 CVE-2002-1437 Directory Traversal vulnerability in Novell Netware 5.1/6.0
Directory traversal vulnerability in the web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to read arbitrary files via an HTTP request containing "..%5c" (URL-encoded dot-dot backslash) sequences.
network
low complexity
novell
5.0
2003-04-11 CVE-2002-1418 Buffer Overflow vulnerability in Novell NetBasic Interpreter Module Name
Buffer overflow in the interpreter for Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote attackers to cause a denial of service (ABEND) via a long module name.
network
low complexity
novell
5.0
2003-04-11 CVE-2002-1417 Directory Traversal vulnerability in Novell NetBasic Scripting Server
Directory traversal vulnerability in Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote attackers to read arbitrary files via a URL containing a "..%5c" sequence (modified dot-dot), which is mapped to the directory separator.
network
low complexity
novell
5.0
2002-12-31 CVE-2002-1772 Unspecified vulnerability in Novell Netware 5.0/5.1
Novell Netware 5.0 through 5.1 may allow local users to gain "Domain Admin" rights by logging into a Novell Directory Services (NDS) account, and executing "net use" on an NDS_ADM account that is not in the NT domain but has domain access rights, which allows the user to enter a null password.
local
low complexity
novell
4.6