CVE-2000-1246: Buffer Overflow
Published Apr 5, 2010
·Updated
NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allows remote authenticated users to cause a denial of service (abend) by sending an RNTO command after a failed RNFR command.
Affected Software
4 affected components
Novell Netware Ftp Server<=5.01i
Novell NetWare FTP Server=5.1-sp3
All of the following
Novell Netware Ftp Server<=5.01i
Novell NetWare FTP Server=5.1-sp3
Event History
Apr 5, 2010
CVE Published
via MITRE·03:15 PM
Data Sourced
via MITRE·03:15 PM
Description
Data Sourced
03:30 PM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·03:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2000-1246?
CVE-2000-1246 is classified as a denial of service vulnerability.
2
How do I fix CVE-2000-1246?
To fix CVE-2000-1246, update the NWFTPD.nlm to version 5.01o or later.
3
What systems are affected by CVE-2000-1246?
CVE-2000-1246 affects NWFTPD.nlm versions prior to 5.01o in Novell NetWare 5.1 SP3.
4
What does CVE-2000-1246 exploit?
CVE-2000-1246 exploits the RNTO command by causing an abend after a failed RNFR command.
5
Is authentication required to exploit CVE-2000-1246?
Yes, CVE-2000-1246 requires authenticated users to exploit the vulnerability.