CVE-2010-0625: Novell Netware

Medium severity, CVSS 6.5. EPSS: 5.2% chance of exploitation in the next 30 days.

Stack-based buffer overflow in NWFTPD.nlm before 5.10.01 in the FTP server in Novell NetWare 5.1 through 6.5 SP8 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long (1) MKD, (2) RMD, (3) RNFR, or (4) DELE command.

Affected products

• Novell Netware: version 5.1 only; version 6.0 only; version 6.5 only
• Novell Netware FTP Server: version 5.01i only; version 5.01o only; version 5.01w only; version 5.01y only; version 5.02b only; version 5.02i only; …

Published 2010-04-05. Last modified 2026-06-16.