PT-2010-1213 · Novell · Novell Netware

Publicado 2010-04-05 · Atualizado 2010-04-06 · CVE-2003-1593

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Novell NetWare versions 6.0 before SP4 and 6.5 before SP1

Description The issue concerns the NWFTPD.nlm component in the FTP server, which fails to enforce domain-name login restrictions. This allows remote attackers to bypass intended access control by establishing an FTP connection.

Recommendations For Novell NetWare version 6.0, apply SP4 or later to resolve the issue. For Novell NetWare version 6.5, apply SP1 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2003-1593

Produtos afetados

Novell Netware

Referências · 2

• http://novell.com/support/viewContent.do?externalId=3238588&sliceId=1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2003-1593 · Nota de Segurança