Novell Netware FTP Server vulnerabilities

17 CVEs affecting Novell Netware FTP Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-0625, published 2010-04-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2010-0625, published 2010-04-05. Medium severity, CVSS 6.5. EPSS: 5.2% chance of exploitation in the next 30 days. Stack-based buffer overflow in NWFTPD.nlm before 5.10.01 in the FTP server in Novell NetWare 5.1 through 6.5 SP8 allows remote authenticated users to cause a denial of service (daemon crash) or…
CVE-2006-1322, published 2006-03-20. Medium severity, CVSS 5.0. EPSS: 3% chance of exploitation in the next 30 days. Novell Netware NWFTPD 5.06.05 allows remote attackers to cause a denial of service (ABEND) via an MDTM command that uses a long path for the target file, possibly due to a buffer overflow.
CVE-2003-1596, published 2010-04-05. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. NWFTPD.nlm before 5.03.12 in the FTP server in Novell NetWare does not properly restrict filesystem use by anonymous users with NFS Gateway home directories, which allows remote attackers to bypass…
CVE-2003-1594, published 2010-04-05. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly enforce FTPREST.TXT settings, which allows remote attackers to bypass intended access restrictions via an FTP…
CVE-2003-1593, published 2010-04-05. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 does not enforce domain-name login restrictions, which allows remote attackers to bypass intended access control via…
CVE-2007-6735, published 2010-04-05. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. NWFTPD.nlm before 5.08.06 in the FTP server in Novell NetWare does not properly handle partial matches for container names in the FTPREST.TXT file, which allows remote attackers to bypass intended…
CVE-2002-2434, published 2010-04-05. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. NWFTPD.nlm before 5.02i in the FTP server in Novell NetWare does not properly listen for data connections, which allows remote attackers to cause a denial of service (abend) via multiple FTP sessions.
CVE-2002-2432, published 2010-04-05. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. Unspecified vulnerability in NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (abend) via a crafted username.
CVE-2003-1592, published 2010-04-05. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. Multiple buffer overflows in NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allow remote attackers to cause a denial of service (abend) via a long (1) username or…
CVE-2005-4888, published 2010-04-05. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. NWFTPD.nlm before 5.06.04 in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (excessive stale connections) by establishing many FTP sessions, which persist in…

Latest

CVE-2007-6734, published 2010-04-05. Medium severity, CVSS 4.0. EPSS: 1.4% chance of exploitation in the next 30 days. NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction, which allows remote authenticated users to access directories…
CVE-2005-4887, published 2010-04-05. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. NWFTPD.nlm before 5.06.05 in the FTP server in Novell NetWare 6.5 SP5 allows attackers to have an unspecified impact via vectors related to passwords.
CVE-2004-2767, published 2010-04-05. Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days. NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause a denial of service (connection slot exhaustion) by…
CVE-2003-1595, published 2010-04-05. High severity, CVSS 10.0. EPSS: 1.7% chance of exploitation in the next 30 days. NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly perform "intruder detection," which has unspecified impact and attack vectors.