PT-2010-1188 · Novell · Nwftpd.Nlm+1

Published 2010-04-05 · Updated 2010-04-05 · CVE-2000-1245

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Novell NetWare versions prior to 5.1 SP3 with NWFTPD.nlm version prior to 5.01o

Description The issue allows remote attackers to bypass intended restrictions on anonymous access via unknown vectors.

Recommendations For versions prior to 5.1 SP3 with NWFTPD.nlm version prior to 5.01o, update NWFTPD.nlm to version 5.01o or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2000-1245

Affected Products

Nwftpd.Nlm

Novell Netware

References · 3

• http://novell.com/support/viewContent.do?externalId=3238588&sliceId=1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-1245 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1245 · Note