Novell: >> Netware Security Vulnerabilities
Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service (CPU consumption) via a connection to the server followed by a carriage return, and possibly other invalid commands with improper syntax or length.
CVSS Score
5.0
EPSS Score
0.011
Published
2002-08-12
Directory traversal vulnerability in ScriptEase viewcode.jse for Netware 5.1 before 5.1 SP3 allows remote attackers to read arbitrary files via ".." sequences in the query string.
CVSS Score
5.0
EPSS Score
0.226
Published
2001-12-31
Netware Enterprise Web Server 5.1 running GroupWise WebAccess 5.5 with Novell Directory Services (NDS) enabled allows remote attackers to enumerate user names, group names and other system information by accessing ndsobj.nlm.
CVSS Score
5.0
EPSS Score
0.007
Published
2001-08-14
Novell NetWare Transaction Tracking System (TTS) in Novell 4.11 and earlier allows remote attackers to cause a denial of service via a large number of requests.
CVSS Score
5.0
EPSS Score
0.007
Published
2001-03-12
Novell NetWare 5.0 allows remote attackers to cause a denial of service by flooding port 40193 with random data.
CVSS Score
5.0
EPSS Score
0.022
Published
2000-07-11
Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed URL.
CVSS Score
7.5
EPSS Score
0.016
Published
2000-06-26
Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands via a long URL.
CVSS Score
7.5
EPSS Score
0.049
Published
2000-04-19
Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spoofing.
CVSS Score
4.6
EPSS Score
0.0
Published
1999-12-31
NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allows local users to gain root privileges by creating a setuid program and setting it to "Read Only," which NetWare-NFS changes to a setuid root program.
CVSS Score
7.2
EPSS Score
0.0
Published
1999-12-31
Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain administrator privileges by spoofing the MAC address in IPC fragmented packets that make NetWare Core Protocol (NCP) calls.
CVSS Score
10.0
EPSS Score
0.014
Published
1999-07-15