ID CVE-2003-1591
Summary NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allows user-assisted remote attackers to cause a denial of service (console hang) via a large number of FTP sessions, which are not properly handled during an NLM unload.
References
Vulnerable Configurations
  • cpe:2.3:o:novell:netware:6.0:*:*:*:*:*:*:*
    cpe:2.3:o:novell:netware:6.0:*:*:*:*:*:*:*
  • cpe:2.3:o:novell:netware:6.0:sp1:*:*:*:*:*:*
    cpe:2.3:o:novell:netware:6.0:sp1:*:*:*:*:*:*
  • cpe:2.3:o:novell:netware:6.0:sp2:*:*:*:*:*:*
    cpe:2.3:o:novell:netware:6.0:sp2:*:*:*:*:*:*
  • cpe:2.3:o:novell:netware:6.0:sp3:*:*:*:*:*:*
    cpe:2.3:o:novell:netware:6.0:sp3:*:*:*:*:*:*
  • cpe:2.3:o:novell:netware:6.5:*:*:*:*:*:*:*
    cpe:2.3:o:novell:netware:6.5:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 08-06-2010 - 04:00)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:N/A:P
refmap via4
confirm http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
Last major update 08-06-2010 - 04:00
Published 05-04-2010 - 15:30
Last modified 08-06-2010 - 04:00
Back to Top