Login Request a demo
Unscored severity · published Apr 11, 2003
CVE-2002-1418
Buffer overflow in the interpreter for Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote attackers to cause a…
–
CVSS
2.7%
EPSS
No
On KEV
Description
Buffer overflow in the interpreter for Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote attackers to cause a denial of service (ABEND) via a long module name.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Netware · Novell
5.1; 6.0 · source: NVD
SB
Small Business Suite · Novell
5.1; 6.0 · source: NVD
Affected product
NE
Netware
Novell
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1418
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1418
Patch
http://archives.neohapsis.com/archives/bugtraq/2002-08/0199.html
support.novell.com
http://support.novell.com/servlet/tidfinder/2963297
Patch
http://www.iss.net/security_center/static/9911.php
Patch
http://www.securityfocus.com/bid/5524
More from Netware
4.0
CVE-1999-0524
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts
–
CVE-2011-4191
Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitrary code or cause a denial of service…
–
CVE-2010-4228
Stack-based buffer overflow in NWFTPD.NLM before 5.10.02 in the FTP server in Novell NetWare allows remote authenticated users to execute arbitrary code or cause a denial of…
–
CVE-2010-4227
The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of service (abend) or execute arbitrary code via a crafted,…
–
CVE-2010-2351
Stack-based buffer overflow in the CIFS.NLM driver in Netware SMB 1.0 for Novell Netware 6.5 SP8 and earlier allows remote attackers to execute arbitrary code via a Sessions Setup…