PT-2010-1232 · Novell · Nwftpd.Nlm+1

Published 2010-04-05 · Updated 2010-04-06 · CVE-2007-6734

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Novell NetWare versions prior to 6.5 SP7 with NWFTPD.nlm before 5.08.07

Description The issue is related to the improper implementation of the FTPREST.TXT NOREMOTE restriction in the FTP server. This allows remote authenticated users to access directories outside of the home server.

Recommendations For versions prior to 6.5 SP7 with NWFTPD.nlm before 5.08.07, update NWFTPD.nlm to version 5.08.07 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2007-6734

Affected Products

Nwftpd.Nlm

Novell Netware

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2007-6734 · Security Note
• http://novell.com/support/viewContent.do?externalId=3238588&sliceId=1 · Vendor Advisory
• https://bugzilla.novell.com/show_bug.cgi?id=272093 · Note