Netware (Novell) - vulnerabilities (CVEs)

70 CVEs, 0 in the last 30 days, 52 known versions, newest CVE from 2011-11-30. Vendor: Novell.

CVEs of Netware

CVE-2011-4191 - CVSS 7.5 (high), 2011-11-30: Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitrary code or cause a…
CVE-2010-4228 - CVSS 9 (critical), 2011-03-22: Stack-based buffer overflow in NWFTPD.NLM before 5.10.02 in the FTP server in Novell NetWare allows remote authenticated users to execute arbitrary code or…
CVE-2010-4227 - CVSS 10 (critical), 2011-02-25: The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of service (abend) or execute arbitrary…
CVE-2010-2351 - CVSS 10 (critical), 2010-06-21: Stack-based buffer overflow in the CIFS.NLM driver in Netware SMB 1.0 for Novell Netware 6.5 SP8 and earlier allows remote attackers to execute arbitrary code…
CVE-2010-0625 - CVSS 6.5 (medium), 2010-04-05: Stack-based buffer overflow in NWFTPD.nlm before 5.10.01 in the FTP server in Novell NetWare 5.1 through 6.5 SP8 allows remote authenticated users to cause a…
CVE-2001-1587 - CVSS 5 (medium), 2010-04-05: NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (abend) via an anonymous STOU command.
CVE-2002-2434 - CVSS 5 (medium), 2010-04-05: NWFTPD.nlm before 5.02i in the FTP server in Novell NetWare does not properly listen for data connections, which allows remote attackers to cause a denial of…
CVE-2003-1593 - CVSS 7.5 (high), 2010-04-05: NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 does not enforce domain-name login restrictions, which allows remote…
CVE-2003-1596 - CVSS 7.5 (high), 2010-04-05: NWFTPD.nlm before 5.03.12 in the FTP server in Novell NetWare does not properly restrict filesystem use by anonymous users with NFS Gateway home directories,…
CVE-2005-4888 - CVSS 5 (medium), 2010-04-05: NWFTPD.nlm before 5.06.04 in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (excessive stale connections) by…
CVE-2000-1246 - CVSS 3.5 (low), 2010-04-05: NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allows remote authenticated users to cause a denial of service (abend) by sending an RNTO…
CVE-2002-2433 - CVSS 4 (medium), 2010-04-05: NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote authenticated users to cause a denial of service (abend) via a crafted ABOR command.
CVE-2003-1592 - CVSS 5 (medium), 2010-04-05: Multiple buffer overflows in NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allow remote attackers to cause a denial of…
CVE-2003-1595 - CVSS 10 (critical), 2010-04-05: NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly perform "intruder detection," which has unspecified impact and attack…
CVE-2005-4887 - CVSS 7.5 (high), 2010-04-05: NWFTPD.nlm before 5.06.05 in the FTP server in Novell NetWare 6.5 SP5 allows attackers to have an unspecified impact via vectors related to passwords.
CVE-2007-6735 - CVSS 7.5 (high), 2010-04-05: NWFTPD.nlm before 5.08.06 in the FTP server in Novell NetWare does not properly handle partial matches for container names in the FTPREST.TXT file, which…
CVE-2000-1245 - CVSS 7.5 (high), 2010-04-05: Multiple unspecified vulnerabilities in NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allow remote attackers to bypass intended…
CVE-2002-2432 - CVSS 5 (medium), 2010-04-05: Unspecified vulnerability in NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (abend) via a…
CVE-2003-1591 - CVSS 4.3 (medium), 2010-04-05: NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allows user-assisted remote attackers to cause a denial of service (console…
CVE-2003-1594 - CVSS 7.5 (high), 2010-04-05: NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly enforce FTPREST.TXT settings, which allows remote attackers to bypass…
CVE-2004-2767 - CVSS 4.3 (medium), 2010-04-05: NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause a denial of service…
CVE-2007-6734 - CVSS 4 (medium), 2010-04-05: NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction, which allows remote…
CVE-2010-0317 - CVSS 7.8 (high), 2010-01-15: Novell Netware 6.5 SP8 allows remote attackers to cause a denial of service (NULL pointer dereference, memory consumption, ABEND, and crash) via a large…
CVE-2008-5696 - CVSS 9.3 (critical), 2008-12-19: Novell NetWare 6.5 before Support Pack 8, when an OES2 Linux server is installed into the NDS tree, does not require a password for the ApacheAdmin console,…
CVE-2006-6675 - CVSS 6.8 (medium), 2006-12-21: Cross-site scripting (XSS) vulnerability in Novell NetWare 6.5 Support Pack 5 and 6 and Novell Apache on NetWare 2.0.48 allows remote attackers to inject…
CVE-2006-2185 - CVSS 4 (medium), 2006-05-22: PORTAL.NLM in Novell Netware 6.5 SP5 writes the username and password in cleartext to the abend.log log file when the groupOperationsMethod function fails,…
CVE-2006-2327 - CVSS 6.4 (medium), 2006-05-12: Multiple integer overflows in the DPRPC library (DPRPCNLM.NLM) NDPS/iPrint module in Novell Distributed Print Services in Novell NetWare 6.5 SP3, SP4, and SP5…
CVE-2006-0997 - CVSS 5 (medium), 2006-03-23: The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) permits encryption with a NULL key, which results in…
CVE-2006-0999 - CVSS 5 (medium), 2006-03-23: The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) allows a client to force the server to use weak…
CVE-2006-0998 - CVSS 5 (medium), 2006-03-23: The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) sometimes selects a weak cipher instead of an…
CVE-2006-1322 - CVSS 5 (medium), 2006-03-20: Novell Netware NWFTPD 5.06.05 allows remote attackers to cause a denial of service (ABEND) via an MDTM command that uses a long path for the target file,…
CVE-2005-2852 - CVSS 5 (medium), 2005-09-08: Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a denial of service (ABEND) via an…
CVE-2005-1060 - CVSS 5 (medium), 2005-05-02: Unknown vulnerability in the TCP/IP functionality (TCPIP.NLM) in Novell Netware 6.x allows remote attackers to cause a denial of service (ABEND by Page Fault…
CVE-2005-0819 - CVSS 5 (medium), 2005-05-02: The xvesa code in Novell Netware 6.5 SP2 and SP3 allows remote attackers to redirect the xsession without authentication via a direct request to…
CVE-2004-2414 - CVSS 2.1 (low), 2004-12-31: Novell NetWare 6.5 SP 1.1, when installing or upgrading using the Overlay CDs and performing a custom installation with OpenSSH, includes sensitive password…
CVE-2004-2103 - CVSS 4.3 (medium), 2004-12-31: Cross-site scripting (XSS) vulnerability in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to process arbitrary script or HTML as…
CVE-2004-2106 - CVSS 5 (medium), 2004-12-31: Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to list directories via a direct request to (1) /com/, (2) /com/novell/, (3)…
CVE-2004-2105 - CVSS 5 (medium), 2004-12-31: The webacc servlet in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to read arbitrary .htt files via a full pathname in the error…
CVE-2004-2734 - CVSS 10 (critical), 2004-12-31: webadmin-apache.conf in Novell Web Manager of Novell NetWare 6.5 uses an uppercase Alias tag with an inconsistent lowercase directory tag for a volume, which…
CVE-2004-2104 - CVSS 5 (medium), 2004-12-31: Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, including the internal IP address, via a…
CVE-2003-0976 - CVSS 7.5 (high), 2003-12-15: NFS Server (XNFS.NLM) for Novell NetWare 6.5 does not properly enforce sys:\etc\exports when hostname aliases from sys:etc\hosts file are used, which could…
CVE-2003-1150 - CVSS 7.5 (high), 2003-10-27: Buffer overflow in the portmapper service (PMAP.NLM) in Novell NetWare 6 SP3 and ZenWorks for Desktops 3.2 SP2 through 4.0.1 allows remote attackers to cause…
CVE-2003-0562 - CVSS 5 (medium), 2003-08-27: Buffer overflow in the CGI2PERL.NLM PERL handler in Novell Netware 5.1 and 6.0 allows remote attackers to cause a denial of service (ABEND) via a long input…
CVE-2002-1413 - CVSS 7.5 (high), 2003-04-11: RCONAG6 for Novell Netware SP2, while running RconJ in secure mode, allows remote attackers to bypass authentication using the RconJ "Secure IP" (SSL) option…
CVE-2002-1436 - CVSS 7.5 (high), 2003-04-11: The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary Perl code via an HTTP POST request.
CVE-2002-1418 - CVSS 5 (medium), 2003-04-11: Buffer overflow in the interpreter for Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote…
CVE-2002-1438 - CVSS 5 (medium), 2003-04-11: The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to obtain Perl version information via the -v option.
CVE-2002-1417 - CVSS 5 (medium), 2003-04-11: Directory traversal vulnerability in Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote…
CVE-2002-1437 - CVSS 5 (medium), 2003-04-11: Directory traversal vulnerability in the web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to read arbitrary files via an…
CVE-2002-1772 - CVSS 4.6 (medium), 2002-12-31: Novell Netware 5.0 through 5.1 may allow local users to gain "Domain Admin" rights by logging into a Novell Directory Services (NDS) account, and executing…
CVE-2002-1634 - CVSS 5 (medium), 2002-12-31: Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) ndsobj.nlm, (2) allfield.jse, (3)…
CVE-2002-2096 - CVSS 7.5 (high), 2002-12-31: Buffer overflow in Novell Remote Manager module, httpstk.nlm, in NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary code via a long (1)…
CVE-2002-2083 - CVSS 2.1 (low), 2002-12-31: The Novell Netware client running on Windows 95 allows local users to bypass the login and open arbitrary files via the "What is this?" help feature, which…
CVE-2002-0930 - CVSS 5 (medium), 2002-10-04: Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 (NWFTPD) allows remote attackers to cause a denial of service (ABEND) via format…
CVE-2002-0929 - CVSS 5 (medium), 2002-10-04: Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of service (reboot) via long DHCP requests.
CVE-2002-0791 - CVSS 5 (medium), 2002-08-12: Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service (CPU consumption) via a connection to the server followed…
CVE-2001-1580 - CVSS 5 (medium), 2001-12-31: Directory traversal vulnerability in ScriptEase viewcode.jse for Netware 5.1 before 5.1 SP3 allows remote attackers to read arbitrary files via ".." sequences…
CVE-2001-1233 - CVSS 5 (medium), 2001-08-14: Netware Enterprise Web Server 5.1 running GroupWise WebAccess 5.5 with Novell Directory Services (NDS) enabled allows remote attackers to enumerate user…
CVE-1999-0805 - CVSS 5 (medium), 2001-03-12: Novell NetWare Transaction Tracking System (TTS) in Novell 4.11 and earlier allows remote attackers to cause a denial of service via a large number of requests.
CVE-2000-0669 - CVSS 5 (medium), 2000-07-11: Novell NetWare 5.0 allows remote attackers to cause a denial of service by flooding port 40193 with random data.
CVE-2000-0600 - CVSS 7.5 (high), 2000-06-26: Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed URL.
CVE-2000-0257 - CVSS 7.5 (high), 2000-04-19: Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands via a long URL.
CVE-1999-1382 - CVSS 7.2 (high), 1999-12-31: NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allows local users to gain root privileges…
CVE-1999-1320 - CVSS 4.6 (medium), 1999-12-31: Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spoofing.
CVE-1999-1086 - CVSS 10 (critical), 1999-07-15: Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain administrator privileges by spoofing…
CVE-1999-0929 - CVSS 5 (medium), 1999-06-16: Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a large number of HTTP GET requests.
CVE-1999-0470 - CVSS 5 (medium), 1999-04-09: A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted.
CVE-1999-1020 - CVSS 7.5 (high), 1998-09-18: The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, which allows remote attackers to access…
CVE-1999-0524 - CVSS 4 (medium), 1997-08-01: ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
CVE-1999-0265 - CVSS 5 (medium), 1997-01-01: ICMP redirect messages may crash or lock up a host.
CVE-1999-1215 - CVSS 4.6 (medium), 1993-09-16: LOGIN.EXE program in Novell Netware 4.0 and 4.01 temporarily writes user name and password information to disk, which could allow local users to gain…