CVE-2002-1772: Medium severity Novell NetWare FTP Server vulnerability

Published Dec 31, 2002

Updated

Novell Netware 5.0 through 5.1 may allow local users to gain "Domain Admin" rights by logging into a Novell Directory Services (NDS) account, and executing "net use" on an NDSADM account that is not in the NT domain but has domain access rights, which allows the user to enter a null password.

Affected Software

3 affected components

Novell NetWare FTP Server=5.0

Novell NetWare FTP Server=5.0-sp5

Novell NetWare FTP Server=5.1

Event History

Dec 31, 2002

CVE Published

05:00 AM

Jun 21, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1772?

CVE-2002-1772 is considered a high severity vulnerability due to its potential to grant local users Domain Admin rights.

How do I fix CVE-2002-1772?

To fix CVE-2002-1772, update Novell Netware to the latest version or apply the necessary patches that address this vulnerability.

Who is affected by CVE-2002-1772?

CVE-2002-1772 affects local users of Novell Netware versions 5.0 and 5.1 who have access to NDS_ADM accounts.

Can CVE-2002-1772 be exploited remotely?

CVE-2002-1772 cannot be exploited remotely as it requires local user access to the system.

What systems are vulnerable to CVE-2002-1772?

Systems running Novell Netware 5.0 and 5.1 are vulnerable to CVE-2002-1772.