CVE-2007-6734

NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction, which allows remote authenticated users to access directories outside of the home server via unspecified vectors.

Score

CVSS 2.0 4.0 Medium

Status

Modified - cve@mitre.org

Published

2010-04-05

Last modified

2024-09-16

Weaknesses

CWE-264

Affected products

• Netware (Novell)
• Netware Ftp Server (Novell)

References

• http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
• https://bugzilla.novell.com/show_bug.cgi?id=272093