PT-2010-1213 · Novell · Novell Netware

Published 2010-04-05 · Updated 2010-04-06 · CVE-2003-1593

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Novell NetWare versions 6.0 before SP4 and 6.5 before SP1

Description The issue concerns the NWFTPD.nlm component in the FTP server, which fails to enforce domain-name login restrictions. This allows remote attackers to bypass intended access control by establishing an FTP connection.

Recommendations For Novell NetWare version 6.0, apply SP4 or later to resolve the issue. For Novell NetWare version 6.5, apply SP1 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2003-1593

Affected Products

Novell Netware

References · 2

• http://novell.com/support/viewContent.do?externalId=3238588&sliceId=1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-1593 · Security Note