CVEvulnerability

CVE-2010-0625

6.5 MEDIUM Published 2010-04-05 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-04-05
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-119

Description

Stack-based buffer overflow in NWFTPD.nlm before 5.10.01 in the FTP server in Novell NetWare 5.1 through 6.5 SP8 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long (1) MKD, (2) RMD, (3) RNFR, or (4) DELE command.

Affected configurations

• novell netware ftp server 5.01i • novell netware ftp server 5.01o • novell netware ftp server 5.01w • novell netware ftp server 5.01y • novell netware ftp server 5.02b • novell netware ftp server 5.02i • novell netware ftp server 5.02r • novell netware ftp server 5.02y • novell netware ftp server 5.03b • novell netware ftp server 5.03l • novell netware ftp server 5.04.5 • novell netware ftp server 5.04.8 • novell netware ftp server 5.04.20 • novell netware ftp server 5.04.25 • novell netware ftp server 5.05 • novell netware ftp server 5.05.04 • novell netware ftp server 5.06.04 • novell netware ftp server 5.06.05 • novell netware ftp server 5.07 • novell netware ftp server 5.07.02 • novell netware 5.1 • novell netware 6.0 • novell netware 6.5

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References