CVE-2003-1593: High severity Novell Netware Ftp Server vulnerability
Published Apr 5, 2010
·Updated
NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 does not enforce domain-name login restrictions, which allows remote attackers to bypass intended access control via an FTP connection.
Affected Software
12 affected components
Novell Netware Ftp Server
Novell NetWare FTP Server=6.0
Novell NetWare FTP Server=6.0-sp1
Novell NetWare FTP Server=6.0-sp2
Novell NetWare FTP Server=6.0-sp3
Novell NetWare FTP Server=6.5
All of the following
Novell Netware Ftp Server
Any of the following
Novell NetWare FTP Server=6.0
Novell NetWare FTP Server=6.0-sp1
Novell NetWare FTP Server=6.0-sp2
Novell NetWare FTP Server=6.0-sp3
Novell NetWare FTP Server=6.5
Event History
Apr 5, 2010
CVE Published
via MITRE·03:15 PM
Data Sourced
via MITRE·03:15 PM
Description
Data Sourced
03:30 PM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·03:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-1593?
CVE-2003-1593 is classified as a moderate risk vulnerability.
2
How do I fix CVE-2003-1593?
To fix CVE-2003-1593, update Novell NetWare to version 6.0 SP4 or 6.5 SP1 or later.
3
What systems are affected by CVE-2003-1593?
CVE-2003-1593 affects Novell NetWare 6.0 before SP4 and 6.5 before SP1.
4
What can an attacker do with CVE-2003-1593?
An attacker can bypass intended access control via an FTP connection due to the lack of domain-name login restrictions.
5
Is authentication compromised in CVE-2003-1593?
Yes, the vulnerability allows remote attackers to bypass authentication mechanisms.