PT-2010-1194 · Novell · Nwftpd.Nlm+1

Published 2010-04-05 · Updated 2010-06-08 · CVE-2002-2434

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Novell NetWare NWFTPD.nlm versions prior to 5.02i

Description The issue is related to the FTP server in Novell NetWare, where NWFTPD.nlm does not properly listen for data connections. This allows remote attackers to cause a denial of service (abend) via multiple FTP sessions.

Recommendations For versions prior to 5.02i, update NWFTPD.nlm to version 5.02i or later to resolve the issue.

Fix

Related Identifiers

CVE-2002-2434

Affected Products

Nwftpd.Nlm

Novell Netware

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2002-2434 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2434 · Note
• http://novell.com/support/viewContent.do?externalId=3238588&sliceId=1 · Note