NE
Product
Netware
71
CVEs
0
On KEV
4.0
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch
Add Netware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-1999-0524 | 4.0 | Aug 1 | ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts Affected: All versions, or not specified |
| CVE-2011-4191 | – | Nov 30 | Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: 6.5 |
| CVE-2010-4228 | – | Mar 22 | Stack-based buffer overflow in NWFTPD.NLM before 5.10.02 in the FTP server in Novell NetWare allows remote authenticated users to execute arbitrary code or cause a denial of… Affected: 5.1; 6.0; 6.5 |
| CVE-2010-4227 | – | Feb 25 | The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of service (abend) or execute arbitrary code via a crafted,… Affected: through 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +2 more |
| CVE-2010-2351 | – | Jun 21 | Stack-based buffer overflow in the CIFS.NLM driver in Netware SMB 1.0 for Novell Netware 6.5 SP8 and earlier allows remote attackers to execute arbitrary code via a Sessions Setup… Affected: through 6.5; 5.0; 5.0; 5.1; 5.1; 6.0; +12 more |
| CVE-2010-0625 | – | Apr 5 | Stack-based buffer overflow in NWFTPD.nlm before 5.10.01 in the FTP server in Novell NetWare 5.1 through 6.5 SP8 allows remote authenticated users to cause a denial of service… Affected: 5.1; 5.1; 5.1; 5.1; 5.1; 6.0; +14 more |
| CVE-2007-6735 | – | Apr 5 | NWFTPD.nlm before 5.08.06 in the FTP server in Novell NetWare does not properly handle partial matches for container names in the FTPREST.TXT file, which allows remote attackers… Affected: All versions, or not specified |
| CVE-2007-6734 | – | Apr 5 | NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction, which allows remote authenticated users to… Affected: 6.5 |
| CVE-2005-4888 | – | Apr 5 | NWFTPD.nlm before 5.06.04 in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (excessive stale connections) by establishing many FTP sessions,… Affected: All versions, or not specified |
| CVE-2005-4887 | – | Apr 5 | NWFTPD.nlm before 5.06.05 in the FTP server in Novell NetWare 6.5 SP5 allows attackers to have an unspecified impact via vectors related to passwords Affected: 6.5 |
| CVE-2004-2767 | – | Apr 5 | NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause a denial of service (connection slot… Affected: All versions, or not specified |
| CVE-2003-1596 | – | Apr 5 | NWFTPD.nlm before 5.03.12 in the FTP server in Novell NetWare does not properly restrict filesystem use by anonymous users with NFS Gateway home directories, which allows remote… Affected: 5.1; 6.0; 6.5 |
| CVE-2003-1595 | – | Apr 5 | NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly perform "intruder detection," which has unspecified impact and attack vectors Affected: 6.5 |
| CVE-2003-1594 | – | Apr 5 | NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly enforce FTPREST.TXT settings, which allows remote attackers to bypass intended access… Affected: 6.5 |
| CVE-2003-1593 | – | Apr 5 | NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 does not enforce domain-name login restrictions, which allows remote attackers to bypass intended… Affected: 6.0; 6.0; 6.0; 6.0; 6.5 |
| CVE-2003-1592 | – | Apr 5 | Multiple buffer overflows in NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allow remote attackers to cause a denial of service (abend) via a… Affected: 6.0; 6.0; 6.0; 6.0; 6.5 |
| CVE-2003-1591 | – | Apr 5 | NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allows user-assisted remote attackers to cause a denial of service (console hang) via a large… Affected: 6.0; 6.0; 6.0; 6.0; 6.5 |
| CVE-2002-2434 | – | Apr 5 | NWFTPD.nlm before 5.02i in the FTP server in Novell NetWare does not properly listen for data connections, which allows remote attackers to cause a denial of service (abend) via… Affected: 5.1; 6.0; 6.5 |
| CVE-2002-2433 | – | Apr 5 | NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote authenticated users to cause a denial of service (abend) via a crafted ABOR command Affected: 5.1; 6.0; 6.5 |
| CVE-2002-2432 | – | Apr 5 | Unspecified vulnerability in NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (abend) via a crafted username Affected: All versions, or not specified |
| CVE-2001-1587 | – | Apr 5 | NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (abend) via an anonymous STOU command Affected: All versions, or not specified |
| CVE-2000-1246 | – | Apr 5 | NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allows remote authenticated users to cause a denial of service (abend) by sending an RNTO command after a… Affected: 5.1 |
| CVE-2000-1245 | – | Apr 5 | Multiple unspecified vulnerabilities in NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allow remote attackers to bypass intended restrictions on anonymous… Affected: 5.1 |
| CVE-2010-0317 | – | Jan 15 | Novell Netware 6.5 SP8 allows remote attackers to cause a denial of service (NULL pointer dereference, memory consumption, ABEND, and crash) via a large number of malformed or AFP… Affected: 6.5 |
| CVE-2008-5696 | – | Dec 19 | Novell NetWare 6.5 before Support Pack 8, when an OES2 Linux server is installed into the NDS tree, does not require a password for the ApacheAdmin console, which allows remote… Affected: through 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +4 more |
| CVE-2006-6675 | – | Dec 21 | Cross-site scripting (XSS) vulnerability in Novell NetWare 6.5 Support Pack 5 and 6 and Novell Apache on NetWare 2.0.48 allows remote attackers to inject arbitrary web script or… Affected: 6.5; 6.5 |
| CVE-2006-2185 | – | May 22 | PORTAL.NLM in Novell Netware 6.5 SP5 writes the username and password in cleartext to the abend.log log file when the groupOperationsMethod function fails, which allows… Affected: 6.5 |
| CVE-2006-2327 | – | May 12 | Multiple integer overflows in the DPRPC library (DPRPCNLM.NLM) NDPS/iPrint module in Novell Distributed Print Services in Novell NetWare 6.5 SP3, SP4, and SP5 allow remote… Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +2 more |
| CVE-2006-0997 | – | Mar 23 | The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) permits encryption with a NULL key, which results in cleartext… Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +1 more |
| CVE-2006-0999 | – | Mar 23 | The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) allows a client to force the server to use weak encryption by stating that… Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +1 more |
| CVE-2006-0998 | – | Mar 23 | The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) sometimes selects a weak cipher instead of an available stronger cipher,… Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +1 more |
| CVE-2006-1322 | – | Mar 20 | Novell Netware NWFTPD 5.06.05 allows remote attackers to cause a denial of service (ABEND) via an MDTM command that uses a long path for the target file, possibly due to a buffer… Affected: 6.5 |
| CVE-2005-2852 | – | Sep 8 | Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a denial of service (ABEND) via an incorrect password length, as… Affected: 5.1; 6.0; 6.5; 6.5 |
| CVE-2005-1060 | – | May 2 | Unknown vulnerability in the TCP/IP functionality (TCPIP.NLM) in Novell Netware 6.x allows remote attackers to cause a denial of service (ABEND by Page Fault Processor Exception)… Affected: 6.0; 6.0; 6.0; 6.0; 6.5; 6.5; +4 more |
| CVE-2005-0819 | – | May 2 | The xvesa code in Novell Netware 6.5 SP2 and SP3 allows remote attackers to redirect the xsession without authentication via a direct request to GUIMirror/Start Affected: 6.5; 6.5 |
| CVE-2004-2414 | – | Dec 31 | Novell NetWare 6.5 SP 1.1, when installing or upgrading using the Overlay CDs and performing a custom installation with OpenSSH, includes sensitive password information in the (1)… Affected: 6.5 |
| CVE-2004-2103 | – | Dec 31 | Cross-site scripting (XSS) vulnerability in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to process arbitrary script or HTML as other users via (1) a… Affected: 5.1; 6.0 |
| CVE-2004-2104 | – | Dec 31 | Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, including the internal IP address, via a direct request to (1)… Affected: 5.1; 6.0 |
| CVE-2004-2105 | – | Dec 31 | The webacc servlet in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to read arbitrary .htt files via a full pathname in the error parameter Affected: 5.1; 6.0 |
| CVE-2004-2106 | – | Dec 31 | Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to list directories via a direct request to (1) /com/, (2) /com/novell/, (3) /com/novell/webaccess, or (4)… Affected: 5.1; 6.0 |
| CVE-2004-2734 | – | Dec 31 | webadmin-apache.conf in Novell Web Manager of Novell NetWare 6.5 uses an uppercase Alias tag with an inconsistent lowercase directory tag for a volume, which allows remote… Affected: 6.5; 6.5; 6.5; 6.5 |
| CVE-2003-0976 | – | Dec 15 | NFS Server (XNFS.NLM) for Novell NetWare 6.5 does not properly enforce sys:\etc\exports when hostname aliases from sys:etc\hosts file are used, which could allow users to mount… Affected: 6.5; 6.5 |
| CVE-2003-1150 | – | Oct 27 | Buffer overflow in the portmapper service (PMAP.NLM) in Novell NetWare 6 SP3 and ZenWorks for Desktops 3.2 SP2 through 4.0.1 allows remote attackers to cause a denial of service… Affected: 6.0 |
| CVE-2003-0562 | – | Aug 27 | Buffer overflow in the CGI2PERL.NLM PERL handler in Novell Netware 5.1 and 6.0 allows remote attackers to cause a denial of service (ABEND) via a long input string Affected: 5.1; 5.1; 5.1; 6.0; 6.0; 6.0 |
| CVE-2002-1436 | – | Apr 11 | The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary Perl code via an HTTP POST request Affected: 5.1; 5.1; 6.0; 6.0 |
| CVE-2002-1418 | – | Apr 11 | Buffer overflow in the interpreter for Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote attackers to cause a… Affected: 5.1; 6.0 |
| CVE-2002-1413 | – | Apr 11 | RCONAG6 for Novell Netware SP2, while running RconJ in secure mode, allows remote attackers to bypass authentication using the RconJ "Secure IP" (SSL) option during a connection Affected: 6.0 |
| CVE-2002-1417 | – | Apr 11 | Directory traversal vulnerability in Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote attackers to read… Affected: 5.1; 6.0 |
| CVE-2002-1438 | – | Apr 11 | The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to obtain Perl version information via the -v option Affected: 5.1; 5.1; 6.0; 6.0 |
| CVE-2002-1437 | – | Apr 11 | Directory traversal vulnerability in the web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to read arbitrary files via an HTTP request… Affected: 5.1; 5.1; 6.0; 6.0 |