CVE-2003-1596: High severity Novell Netware Ftp Server vulnerability
NWFTPD.nlm before 5.03.12 in the FTP server in Novell NetWare does not properly restrict filesystem use by anonymous users with NFS Gateway home directories, which allows remote attackers to bypass intended access restrictions via an FTP session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1596?
CVE-2003-1596 is considered a high-severity vulnerability due to its potential to allow unauthorized filesystem access.
How do I fix CVE-2003-1596?
To fix CVE-2003-1596, upgrade the FTP server in Novell NetWare to version 5.03.12 or later.
Which versions of Novell NetWare are affected by CVE-2003-1596?
CVE-2003-1596 affects Novell NetWare FTP server versions up to 5.03b and certain specific versions including 5.01i, 5.01o, 5.01w, 5.01y, 5.02b, 5.02i, 5.02r, and 5.02y.
What systems are vulnerable due to CVE-2003-1596?
The systems vulnerable to CVE-2003-1596 include Novell NetWare versions 5.1, 6.0, and 6.5 along with specific FTP server versions.
Can CVE-2003-1596 be exploited remotely?
Yes, CVE-2003-1596 can be exploited remotely through an FTP session by unauthorized attackers.