Browse CVEs

MEDIUM 5.0 CVE-2002-1438 The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to obtain Perl version information via the -v option. Netware Patch available Fix from $1,6002003-04-11 HIGH 7.5 CVE-2002-1552 Novell eDirectory (eDir) 8.6.2 and Netware 5.1 eDir 85.x allows users with expired passwords to gain inappropriate permissions when logging in from R… Edirectory Patch available Fix from $1,9502003-03-31 CRITICAL 9.8 CVE-2002-2119 Novell eDirectory 8.6.2 and 8.7 use case insensitive passwords, which makes it easier for remote attackers to conduct brute force password guessing. Edirectory No fix yet Fix from $2,3002002-12-31 HIGH 7.5 CVE-2002-2096 Buffer overflow in Novell Remote Manager module, httpstk.nlm, in NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary code via a lo… Netware Patch available Fix from $1,9502002-12-31 MEDIUM 5.0 CVE-2002-1634EPSS 17% Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) ndsobj.nlm, (2) allfield.jse, (3)… Netware Patch available Fix from $1,6002002-12-31 MEDIUM 5.0 CVE-2002-1283 Buffer overflow in Novell iManager (eMFrame) before 1.5 allows remote attackers to cause a denial of service via an authentication request with a lon… Emframe Patch available Fix from $1,6002002-11-29 HIGH 7.5 CVE-2002-0996 Multiple buffer overflows in Novell NetMail (NIMS) 3.0.3 before 3.0.3C allows remote attackers to cause a denial of service and possibly execute arbi… Netmail Patch available Fix from $1,9502002-10-04 HIGH 7.5 CVE-2002-1088 Buffer overflow in Novell GroupWise 6.0.1 Support Pack 1 allows remote attackers to execute arbitrary code via a long RCPT TO command. Groupwise Patch available Fix from $1,9502002-10-04 MEDIUM 5.0 CVE-2002-0929 Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of service (reboot) via long DHCP requests. Netware Mitigation only Fix from $1,6002002-10-04 MEDIUM 5.0 CVE-2002-0930 Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 (NWFTPD) allows remote attackers to cause a denial of service (ABEND) via fo… Netware Mitigation only Fix from $1,6002002-10-04 MEDIUM 5.0 CVE-2002-0997 Buffer overflows in IMAP Agent (imapd) for Novell NetMail (NIMS) 3.0.3 before 3.0.3A allows remote attackers to cause a denial of service. Netmail Patch available Fix from $1,6002002-10-04 MEDIUM 5.0 CVE-2002-1002 Buffer overflow in Novell iManager (eMFrame 1.2.1) allows remote attackers to cause a denial of service (crash) via a long user name. Emframe Patch available Fix from $1,6002002-10-04 MEDIUM 5.1 CVE-2002-0530 Cross-site scripting vulnerability in Novell Web Search 2.0.1 allows remote attackers to execute arbitrary script as other Web Search users via the s… Web Search Mitigation only Fix from $1,6002002-08-12 MEDIUM 5.0 CVE-2002-0779 FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service (network connectivity loss) via a connection… Bordermanager Patch available Fix from $1,6002002-08-12 MEDIUM 5.0 CVE-2002-0780 IP/IPX gateway for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a connection to port 8225 with a large amo… Bordermanager Patch available Fix from $1,6002002-08-12 MEDIUM 5.0 CVE-2002-0781 RTSP proxy for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a GET request to port 9090 followed by a serie… Bordermanager Patch available Fix from $1,6002002-08-12 MEDIUM 5.0 CVE-2002-0782 Novell BorderManager 3.5 with PAT (Port-Address Translate) enabled allows remote attackers to cause a denial of service by filling the connection tab… Bordermanager Mitigation only Fix from $1,6002002-08-12 MEDIUM 5.0 CVE-2002-0791 Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service (CPU consumption) via a connection to the server f… Netware Patch available Fix from $1,6002002-08-12 MEDIUM 5.0 CVE-2002-0341 GWWEB.EXE in GroupWise Web Access 5.5, and possibly other versions, allows remote attackers to determine the full pathname of the web server via an H… Groupwise Mitigation only Fix from $1,6002002-06-25 MEDIUM 5.0 CVE-1999-1081 Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files. Web Server Mitigation only Fix from $1,6002002-01-15 HIGH 7.5 CVE-2001-1195EPSS 7% Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager, which allows remote attackers… Groupwise Patch available Fix from $1,9502001-12-15 MEDIUM 5.0 CVE-2001-1458 Directory traversal vulnerability in Novell GroupWise 5.5 and 6.0 allows remote attackers to read arbitrary files via a request for /servlet/webacc?U… Groupwise No fix yet Fix from $1,6002001-10-15 MEDIUM 5.0 CVE-2001-1231 GroupWise 5.5 and 6 running in live remote or smart caching mode allows remote attackers to read arbitrary users' mailboxes by extracting usernames a… Groupwise Patch available Fix from $1,6002001-08-14 MEDIUM 5.0 CVE-2001-1232 GroupWise WebAccess 5.5 with directory indexing enabled allows a remote attacker to view arbitrary directory contents via an HTTP request with a lowe… Groupwise Patch available Fix from $1,6002001-08-14 MEDIUM 5.0 CVE-2001-1233 Netware Enterprise Web Server 5.1 running GroupWise WebAccess 5.5 with Novell Directory Services (NDS) enabled allows remote attackers to enumerate u… Groupwise Webaccess Patch available Fix from $1,6002001-08-14 MEDIUM 5.0 CVE-2001-0486EPSS 5% Remote attackers can cause a denial of service in Novell BorderManager 3.6 and earlier by sending TCP SYN flood to port 353. Bordermanager after 3.6 Fix from $1,6002001-07-02 MEDIUM 5.0 CVE-2001-0355 Novell Groupwise 5.5 (sp1 and sp2) allows a remote user to access arbitrary files via an implementation error in Groupwise system policies. Groupwise Mitigation only Fix from $1,6002001-06-27 MEDIUM 5.0 CVE-1999-0805 Novell NetWare Transaction Tracking System (TTS) in Novell 4.11 and earlier allows remote attackers to cause a denial of service via a large number o… Netware after 4.11 Fix from $1,6002001-03-12 HIGH 10.0 CVE-2000-0793 Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the auto-protection service after the first user has logged off of… Client Mitigation only Fix from $1,9502000-10-20 MEDIUM 5.0 CVE-2000-0669 Novell NetWare 5.0 allows remote attackers to cause a denial of service by flooding port 40193 with random data. Netware No fix yet Fix from $1,6002000-07-11