PT-2010-1189 · Novell · Nwftpd.Nlm+1

Published 2010-04-05 · Updated 2010-04-05 · CVE-2000-1246

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Novell NetWare versions prior to 5.1 SP3 with NWFTPD.nlm before 5.01o

Description The issue allows remote authenticated users to cause a denial of service by sending an RNTO command after a failed RNFR command.

Recommendations For versions prior to 5.1 SP3 with NWFTPD.nlm before 5.01o, update NWFTPD.nlm to version 5.01o or later to resolve the issue.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2000-1246

Affected Products

Nwftpd.Nlm

Novell Netware

References · 3

• http://novell.com/support/viewContent.do?externalId=3238588&sliceId=1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-1246 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1246 · Note