Lucene search
HistoryOct 03, 2022 - 4:14 p.m.
CVE-2007-6735
cve-2007-6735
nwftpd.nlm
novell netware
ftp server
access restrictions
security vulnerability
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.3%
NWFTPD.nlm before 5.08.06 in the FTP server in Novell NetWare does not properly handle partial matches for container names in the FTPREST.TXT file, which allows remote attackers to bypass intended access restrictions via an FTP session.
Affected configurations
Node
novellnetware_ftp_server
novellnetware
| CPE | Name | Operator | Version |
|---|---|---|---|
| novell:netware_ftp_server | novell netware ftp server | eq | * |
| novell:netware | novell netware | eq | * |
Related
nvd
nvd
CVE-2007-6735
2010-04-05 15:30:00
prion
prion
Session fixation
2010-04-05 15:30:00
cvelist
cvelist
CVE-2007-6735
2022-10-03 16:14:26
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.3%
Related for CVE-2007-6735