Novell Netware vulnerabilities

CVE-2006-0997 [MEDIUM] CVE-2006-0997: The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (O The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) permits encryption with a NULL key, which results in cleartext communication that allows remote attackers to read an SSL protected session by sniffing network traffic.

CVE-2007-6734 [MEDIUM] CWE-264 CVE-2007-6734: NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement th NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction, which allows remote authenticated users to access directories outside of the home server via unspecified vectors.

CVE-2006-0998 [MEDIUM] CVE-2006-0998: The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (O The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) sometimes selects a weak cipher instead of an available stronger cipher, which makes it easier for remote attackers to sniff and decrypt an SSL protected session.

CVE-2006-0999 [MEDIUM] CVE-2006-0999: The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (O The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow remote attackers to decrypt contents of an SSL protected session.

CVE-2002-1418 [MEDIUM] CVE-2002-1418: Buffer overflow in the interpreter for Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, Buffer overflow in the interpreter for Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote attackers to cause a denial of service (ABEND) via a long module name.

CVE-2005-1060 [MEDIUM] CVE-2005-1060: Unknown vulnerability in the TCP/IP functionality (TCPIP.NLM) in Novell Netware 6.x allows remote at Unknown vulnerability in the TCP/IP functionality (TCPIP.NLM) in Novell Netware 6.x allows remote attackers to cause a denial of service (ABEND by Page Fault Processor Exception) via certain packets.

CVE-2006-2185 [MEDIUM] CVE-2006-2185: PORTAL.NLM in Novell Netware 6.5 SP5 writes the username and password in cleartext to the abend.log PORTAL.NLM in Novell Netware 6.5 SP5 writes the username and password in cleartext to the abend.log log file when the groupOperationsMethod function fails, which allows context-dependent attackers to gain privileges.

CVE-2002-0929 [MEDIUM] CVE-2002-0929: Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of service (reboot) via long DHCP requests.

CVE-1999-0805 [MEDIUM] CVE-1999-0805: Novell NetWare Transaction Tracking System (TTS) in Novell 4.11 and earlier allows remote attackers Novell NetWare Transaction Tracking System (TTS) in Novell 4.11 and earlier allows remote attackers to cause a denial of service via a large number of requests.

CVE-2004-2103 [MEDIUM] CVE-2004-2103: Cross-site scripting (XSS) vulnerability in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows Cross-site scripting (XSS) vulnerability in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to process arbitrary script or HTML as other users via (1) a malformed request for a Perl program with script in the filename, (2) the User.id parameter to the webacc servlet, (3) the GWAP.version parameter to webacc, or (4) a URL request for a

CVE-2002-0930 [MEDIUM] CVE-2002-0930: Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 (NWFTPD) allows remote atta Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 (NWFTPD) allows remote attackers to cause a denial of service (ABEND) via format strings in the USER command.

CVE-2001-1233 [MEDIUM] CVE-2001-1233: Netware Enterprise Web Server 5.1 running GroupWise WebAccess 5.5 with Novell Directory Services (ND Netware Enterprise Web Server 5.1 running GroupWise WebAccess 5.5 with Novell Directory Services (NDS) enabled allows remote attackers to enumerate user names, group names and other system information by accessing ndsobj.nlm.

CVE-2002-1438 [MEDIUM] CVE-2002-1438: The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to obtain The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to obtain Perl version information via the -v option.

CVE-2002-0791 [MEDIUM] CVE-2002-0791: Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service ( Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service (CPU consumption) via a connection to the server followed by a carriage return, and possibly other invalid commands with improper syntax or length.

CVE-2003-1591 [MEDIUM] CVE-2003-1591: NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allows user-assiste NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allows user-assisted remote attackers to cause a denial of service (console hang) via a large number of FTP sessions, which are not properly handled during an NLM unload.

CVE-2002-2433 [MEDIUM] CWE-20 CVE-2002-2433: NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote authenticated users to cau NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote authenticated users to cause a denial of service (abend) via a crafted ABOR command.

CVE-1999-0929 [MEDIUM] CVE-1999-0929: Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a deni Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a large number of HTTP GET requests.

CVE-1999-1320 [MEDIUM] CVE-1999-1320: Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spo Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spoofing.

CVE-2002-1772 [MEDIUM] CVE-2002-1772: Novell Netware 5.0 through 5.1 may allow local users to gain "Domain Admin" rights by logging into a Novell Netware 5.0 through 5.1 may allow local users to gain "Domain Admin" rights by logging into a Novell Directory Services (NDS) account, and executing "net use" on an NDS_ADM account that is not in the NT domain but has domain access rights, which allows the user to enter a null password.

CVE-1999-1215 [MEDIUM] CVE-1999-1215: LOGIN.EXE program in Novell Netware 4.0 and 4.01 temporarily writes user name and password informati LOGIN.EXE program in Novell Netware 4.0 and 4.01 temporarily writes user name and password information to disk, which could allow local users to gain privileges.