PT-2005-1781 · Novell · Mini Ftp Server+1

Francisco Amato · Published 2005-03-13 · Updated 2017-07-11 · CVE-2005-0746

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Novell iChain versions 2.2 through 2.3 SP2

Description The issue allows remote unauthenticated attackers to obtain the full path of the server. This is achieved via the PWD command in the Mini FTP server.

Recommendations For Novell iChain versions 2.2 through 2.3 SP2, consider restricting access to the Mini FTP server until a fix is available. As a temporary workaround, disabling the PWD command in the Mini FTP server may help minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-0746

Affected Products

Mini Ftp Server

Novell Ichain

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2005-0746 · Security Note
• http://secunia.com/advisories/14537 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19643 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0746 · Note
• http://infobyte.com.ar/adv/ISR-03.html · Note
• http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096886.htm · Note
• http://securityfocus.com/bid/12766 · Note
• http://marc.info/?l=bugtraq&m=111091102023359&w=2 · Note
• http://securitytracker.com/id?1013407 · Note