Novell Netware vulnerabilities, page 2
64 vulnerabilities
Known vulnerabilities in Novell Netware, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2000-0600netscapeenterprise_server+1
EPSS score2.41%
Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed URL.CVE-2000-0669novellnetwareEPSS score2.51%
Novell NetWare 5.0 allows remote attackers to cause a denial of service by flooding port 40193 with random data.CVE-2011-4191novellnetwareEPSS score10.24%
Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitrary code or cause a denial of service (abend or NFS outage) via long packets.CVE-2010-2351novellnetwareEPSS score15.72%
Stack-based buffer overflow in the CIFS.NLM driver in Netware SMB 1.0 for Novell Netware 6.5 SP8 and earlier allows remote attackers to execute arbitrary code via a Sessions Setup AndX packet with a long AccountName.CVE-2010-0625novellnetware+1EPSS score5.19%
Stack-based buffer overflow in NWFTPD.nlm before 5.10.01 in the FTP server in Novell NetWare 5.1 through 6.5 SP8 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long (1) MKD, (2) RMD, (3) RNFR, or (4) DELE command.CVE-2010-0317novellnetwareEPSS score10.47%
Novell Netware 6.5 SP8 allows remote attackers to cause a denial of service (NULL pointer dereference, memory consumption, ABEND, and crash) via a large number of malformed or AFP requests that are not properly handled by (1) the CIFS functionality in CIFS.nlm Semantic Agent (Build 163 MP) 3.27 or (2) the AFP functionality in AFPTCP.nlm Build 163 SP 3.27. NOTE: some of these details are obtained from third party information.CVE-2010-4227novellnetwareEPSS score16.82%
The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of service (abend) or execute arbitrary code via a crafted, signed value in a NFS RPC request to port UDP 1234, leading to a stack-based buffer overflow.CVE-2010-4228novellnetwareEPSS score14.66%
Stack-based buffer overflow in NWFTPD.NLM before 5.10.02 in the FTP server in Novell NetWare allows remote authenticated users to execute arbitrary code or cause a denial of service (abend) via a long DELE command, a different vulnerability than CVE-2010-0625.4.CVE-1999-1215novellnetwareEPSS score0.37%
LOGIN.EXE program in Novell Netware 4.0 and 4.01 temporarily writes user name and password information to disk, which could allow local users to gain privileges.CVE-1999-1086novellnetwareEPSS score2.60%
Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain administrator privileges by spoofing the MAC address in IPC fragmented packets that make NetWare Core Protocol (NCP) calls.CVE-1999-1020novellnetwareEPSS score7.13%
The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, which allows remote attackers to access sensitive information such as users, groups, and readable objects via CX.EXE and NLIST.EXE.CVE-1999-1320novellnetwareEPSS score0.32%
Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spoofing.CVE-1999-0929novellhttp_server+1EPSS score1.91%
Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a large number of HTTP GET requests.CVE-1999-0470novellnetwareEPSS score3.37%
A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted.CVE-1999-0805novellnetwareEPSS score1.29%
Novell NetWare Transaction Tracking System (TTS) in Novell 4.11 and earlier allows remote attackers to cause a denial of service via a large number of requests.CVE-1999-0524chainguardhyperv-daemons-6.18+65EPSS score32.15%
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.CVE-1999-0265novellnetwareEPSS score1.09%
ICMP redirect messages may crash or lock up a host.CVE-2004-2414novellnetwareEPSS score0.40%
Novell NetWare 6.5 SP 1.1, when installing or upgrading using the Overlay CDs and performing a custom installation with OpenSSH, includes sensitive password information in the (1) NIOUTPUT.TXT and (2) NI.LOG log files, which might allow local users to obtain the passwords.CVE-2004-2104novellnetwareEPSS score11.94%
Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, including the internal IP address, via a direct request to (1) snoop.jsp, (2) SnoopServlet, (3) env.bas, or (4) lcgitest.nlm.CVE-2004-2734novellnetwareEPSS score4.00%
webadmin-apache.conf in Novell Web Manager of Novell NetWare 6.5 uses an uppercase Alias tag with an inconsistent lowercase directory tag for a volume, which allows remote attackers to bypass access control to the WEB-INF folder.