Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2003-1596
cve-2003-1596
nwftpd.nlm
novell netware
ftp server
remote attackers
access restrictions
ftp session
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.3%
NWFTPD.nlm before 5.03.12 in the FTP server in Novell NetWare does not properly restrict filesystem use by anonymous users with NFS Gateway home directories, which allows remote attackers to bypass intended access restrictions via an FTP session.
Affected configurations
Node
novellnetware_ftp_serverRange≤5.03b
ORnovellnetware_ftp_serverMatch5.01i
ORnovellnetware_ftp_serverMatch5.01o
ORnovellnetware_ftp_serverMatch5.01w
ORnovellnetware_ftp_serverMatch5.01y
ORnovellnetware_ftp_serverMatch5.02b
ORnovellnetware_ftp_serverMatch5.02i
ORnovellnetware_ftp_serverMatch5.02r
ORnovellnetware_ftp_serverMatch5.02y
novellnetwareMatch5.1
ORnovellnetwareMatch6.0
ORnovellnetwareMatch6.5
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.3%
Related for CVE-2003-1596