CVE-2003-1596
First published: Mon Apr 05 2010(Updated: )
NWFTPD.nlm before 5.03.12 in the FTP server in Novell NetWare does not properly restrict filesystem use by anonymous users with NFS Gateway home directories, which allows remote attackers to bypass intended access restrictions via an FTP session.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Novell NetWare FTP Server | <=5.03b | |
| Novell NetWare FTP Server | =5.01i | |
| Novell NetWare FTP Server | =5.01o | |
| Novell NetWare FTP Server | =5.01w | |
| Novell NetWare FTP Server | =5.01y | |
| Novell NetWare FTP Server | =5.02b | |
| Novell NetWare FTP Server | =5.02i | |
| Novell NetWare FTP Server | =5.02r | |
| Novell NetWare FTP Server | =5.02y | |
| Novell NetWare FTP Server | =5.1 | |
| Novell NetWare FTP Server | =6.0 | |
| Novell NetWare FTP Server | =6.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2003-1596?
CVE-2003-1596 is considered a high-severity vulnerability due to its potential to allow unauthorized filesystem access.
How do I fix CVE-2003-1596?
To fix CVE-2003-1596, upgrade the FTP server in Novell NetWare to version 5.03.12 or later.
Which versions of Novell NetWare are affected by CVE-2003-1596?
CVE-2003-1596 affects Novell NetWare FTP server versions up to 5.03b and certain specific versions including 5.01i, 5.01o, 5.01w, 5.01y, 5.02b, 5.02i, 5.02r, and 5.02y.
What systems are vulnerable due to CVE-2003-1596?
The systems vulnerable to CVE-2003-1596 include Novell NetWare versions 5.1, 6.0, and 6.5 along with specific FTP server versions.
Can CVE-2003-1596 be exploited remotely?
Yes, CVE-2003-1596 can be exploited remotely through an FTP session by unauthorized attackers.
- collector/nvd-historical
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/novell
- canonical/novell netware ftp server
- version/novell netware ftp server/5.03b
- version/novell netware ftp server/5.01i
- version/novell netware ftp server/5.01o
- version/novell netware ftp server/5.01w
- version/novell netware ftp server/5.01y
- version/novell netware ftp server/5.02b
- version/novell netware ftp server/5.02i
- version/novell netware ftp server/5.02r
- version/novell netware ftp server/5.02y
- version/novell netware ftp server/5.1
- version/novell netware ftp server/6.0
- version/novell netware ftp server/6.5