CVE-2003-1594

CWE-2643 documents3 sources
Severity
7.5HIGH
EPSS
0.1%
top 67.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Novell Netware
Timeline
PublishedApr 5
Latest updateApr 29

Description

NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly enforce FTPREST.TXT settings, which allows remote attackers to bypass intended access restrictions via an FTP session.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-h7hm-fm85-r375: NWFTPD↗2022-04-29
▶
CVEList
CVE-2003-1594: NWFTPD↗2010-04-05
▶
CVE-2003-1594 (HIGH CVSS 7.5) | NWFTPD.nlm before 5.04.05 in the FT | cvebase.io