Browse CVEs

HIGH 9.3 CVE-2008-5073EPSS 5% Heap-based buffer overflow in an ActiveX control in Novell ZENworks Desktop Management 6.5 allows remote attackers to execute arbitrary code via a lo… Zenworks Desktop Management Mitigation only Fix from $1,9502008-11-14 HIGH 10.0 CVE-2008-3159EPSS 9% Integer overflow in ds.dlm, as used by dhost.exe, in Novell eDirectory 8.7.3.10 before 8.7.3 SP10b and 8.8 before 8.8.2 ftf2 allows remote attackers … Edirectory Mitigation only Fix from $1,9502008-07-14 HIGH 7.2 CVE-2008-2145 Stack-based buffer overflow in Novell Client 4.91 SP4 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitr… Client Mitigation only Fix from $1,9502008-05-12 HIGH 9.3 CVE-2008-2069EPSS 33% Buffer overflow in Novell GroupWise 7 allows remote attackers to cause a denial of service or execute arbitrary code via a long argument in a mailto:… Groupwise No fix yet Fix from $1,9502008-05-02 MEDIUM 5.0 CVE-2008-1777 The eDirectory Host Environment service (dhost.exe) in Novell eDirectory 8.8.2 allows remote attackers to cause a denial of service (CPU consumption)… Edirectory No fix yet Fix from $1,6002008-04-14 HIGH 7.5 CVE-2008-0731 The Linux kernel before 2.6.18.8-0.8 in SUSE openSUSE 10.2 does not properly handle failure of an AppArmor change_hat system call, which might allow … Apparmor Mitigation only Fix from $1,9502008-02-12 HIGH 7.5 CVE-2007-3570 The Linux Access Gateway in Novell Access Manager before 3.0 SP1 Release Candidate 1 (RC1) allows remote attackers to bypass unspecified security con… Access Manager Mitigation only Fix from $1,9502007-07-05 MEDIUM 6.0 CVE-2007-0108 nwgina.dll in Novell Client 4.91 SP3 for Windows 2000/XP/2003 does not delete user profiles during a Terminal Service or Citrix session, which allows… Client Mitigation only Fix from $1,6002007-01-09 MEDIUM 6.8 CVE-2006-6675 Cross-site scripting (XSS) vulnerability in Novell NetWare 6.5 Support Pack 5 and 6 and Novell Apache on NetWare 2.0.48 allows remote attackers to in… Apache Http Server No fix yet Fix from $1,6002006-12-21 HIGH 7.5 CVE-2006-6450EPSS 22% Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management (ZPM) before 6.3.2.700 allow remote attackers… Zenworks Patch Management Server Mitigation only Fix from $1,9502006-12-10 HIGH 10.0 CVE-2006-6443 Buffer overflow in the Novell Distributed Print Services (NDPS) Print Provider for Windows component (NDPPNT.DLL) in Novell Client 4.91 has unknown i… Client No fix yet Fix from $1,9502006-12-10 HIGH 7.5 CVE-2006-5814 Unspecified vulnerability in Novell eDirectory allows remote attackers to execute arbitrary code, as demonstrated by vd_novell.pm, a "Novell eDirecto… Edirectory No fix yet Fix from $1,9502006-11-08 MEDIUM 5.0 CVE-2006-5813 Unspecified vulnerability in Novell eDirectory 8.8 allows attackers to cause a denial of service, as demonstrated by vd_novell3.pm, a "Novell eDirect… Edirectory No fix yet Fix from $1,6002006-11-08 MEDIUM 5.0 CVE-2006-0997 The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) permits encryption with a NULL key, which res… Open Enterprise Server Mitigation only Fix from $1,6002006-03-23 MEDIUM 5.0 CVE-2006-0998 The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) sometimes selects a weak cipher instead of an… Open Enterprise Server Mitigation only Fix from $1,6002006-03-23 MEDIUM 5.0 CVE-2006-0999 The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) allows a client to force the server to use we… Open Enterprise Server Mitigation only Fix from $1,6002006-03-23 HIGH 10.0 CVE-2006-0736EPSS 7% Stack-based buffer overflow in the pam_micasa PAM authentication module in CASA on Novell Linux Desktop 9 and Open Enterprise Server 1 allows remote … Linux Desktop No fix yet Fix from $1,9502006-02-27 MEDIUM 5.0 CVE-2006-0803 The signature verification functionality in the YaST Online Update (YOU) script handling relies on a gpg feature that is not intended for signature v… Suse Linux Mitigation only Fix from $1,6002006-02-23 HIGH 7.5 CVE-2005-3655EPSS 6% Heap-based buffer overflow in Novell Open Enterprise Server Remote Manager (novell-nrm) in Novell SUSE Linux Enterprise Server 9 allows remote attack… Open Enterprise Server No fix yet Fix from $1,9502005-12-31 MEDIUM 6.9 CVE-2005-4790 Multiple untrusted search path vulnerabilities in SUSE Linux 9.3 and 10.0, and possibly other distributions, cause the working directory to be added … Suse Linux Mitigation only Fix from $1,6002005-12-31 MEDIUM 6.4 CVE-2005-2176 Novell NetMail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attacker… Netmail No fix yet Fix from $1,6002005-07-09 MEDIUM 5.0 CVE-2005-1729 Novell eDirectory 8.7.3 allows remote attackers to cause a denial of service (application crash) via a URL containing an MS-DOS device name such as A… Edirectory Mitigation only Fix from $1,6002005-06-12 HIGH 7.5 CVE-2005-1543EPSS 66% Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENworks 6.5 Desktop and Server Man… Zenworks Mitigation only Fix from $1,9502005-05-25 HIGH 7.2 CVE-2005-1040 Multiple unknown vulnerabilities in netapplet in Novell Linux Desktop 9 allow local users to gain root privileges, related to "User input [being] pas… Linux Desktop Mitigation only Fix from $1,9502005-05-02 MEDIUM 5.0 CVE-2005-0746 The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via th… Ichain Mitigation only Fix from $1,6002005-05-02 HIGH 7.5 CVE-2005-0798 Novell iChain Mini FTP Server 2.3, and possibly earlier versions, does not limit the number of incorrect logins, which makes it easier for remote att… Ichain Mitigation only Fix from $1,9502005-03-15 MEDIUM 5.0 CVE-2005-0296 NOTE: this issue has been disputed by the vendor. The error module in Novell GroupWise WebAccess allows remote attackers who have not authenticated … Groupwise Mitigation only Fix from $1,6002005-01-17 HIGH 10.0 CVE-2004-2734 webadmin-apache.conf in Novell Web Manager of Novell NetWare 6.5 uses an uppercase Alias tag with an inconsistent lowercase directory tag for a volum… Netware Mitigation only Fix from $1,9502004-12-31 HIGH 7.2 CVE-2004-2554 Novell Client Firewall (NCF) 2.0, as based on the Agnitum Outpost Firewall, allows local users to execute arbitrary code with SYSTEM privileges by op… Client Firewall Mitigation only Fix from $1,9502004-12-31 MEDIUM 5.0 CVE-2004-2104EPSS 12% Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, including the internal IP address, v… Netware Mitigation only Fix from $1,6002004-12-31