PT-2010-1212 · Novell · Novell Netware

Publicado 2010-04-05 · Atualizado 2010-04-06 · CVE-2003-1592

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Novell NetWare versions 6.0 before SP4 and 6.5 before SP1

Description The issue is related to multiple buffer overflows in the NWFTPD.nlm component of the FTP server. This can be exploited by remote attackers to cause a denial of service (abend) by providing a long username or password.

Recommendations For Novell NetWare version 6.0, update to SP4 or later to resolve the issue. For Novell NetWare version 6.5, update to SP1 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2003-1592

Produtos afetados

Novell Netware

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2003-1592 · Nota de Segurança
• http://novell.com/support/viewContent.do?externalId=3238588&sliceId=1 · Aviso do Fabricante