PT-2002-1800 · Novell · Novell Bordermanager

Published 2002-07-26 · Updated 2008-09-05 · CVE-2002-0779

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Novell BorderManager version 3.6 SP 1a

Description: The issue allows remote attackers to cause a denial of service, resulting in network connectivity loss. This is achieved by establishing a connection to port 21 and sending a large amount of random data.

Recommendations: For Novell BorderManager version 3.6 SP 1a, consider restricting access to port 21 to minimize the risk of exploitation. As a temporary workaround, limit the amount of data that can be sent through the FTP proxy server to prevent network connectivity loss. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-0779

Affected Products

Novell Bordermanager

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-0779 · Security Note
• http://securityfocus.com/bid/4696 · Vendor Advisory
• http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0060.html · Vendor Advisory
• http://iss.net/security_center/static/9031.php · Vendor Advisory
• http://online.securityfocus.com/archive/1/271475 · Note