PT-2010-1212 · Novell · Novell Netware

Published 2010-04-05 · Updated 2010-04-06 · CVE-2003-1592

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Novell NetWare versions 6.0 before SP4 and 6.5 before SP1

Description The issue is related to multiple buffer overflows in the NWFTPD.nlm component of the FTP server. This can be exploited by remote attackers to cause a denial of service (abend) by providing a long username or password.

Recommendations For Novell NetWare version 6.0, update to SP4 or later to resolve the issue. For Novell NetWare version 6.5, update to SP1 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2003-1592

Affected Products

Novell Netware

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2003-1592 · Security Note
• http://novell.com/support/viewContent.do?externalId=3238588&sliceId=1 · Vendor Advisory