First published: Mon Apr 05 2010(Updated: )
NWFTPD.nlm before 5.03.12 in the FTP server in Novell NetWare does not properly restrict filesystem use by anonymous users with NFS Gateway home directories, which allows remote attackers to bypass intended access restrictions via an FTP session.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Novell Netware Ftp Server | <=5.03b | |
Novell Netware Ftp Server | =5.01i | |
Novell Netware Ftp Server | =5.01o | |
Novell Netware Ftp Server | =5.01w | |
Novell Netware Ftp Server | =5.01y | |
Novell Netware Ftp Server | =5.02b | |
Novell Netware Ftp Server | =5.02i | |
Novell Netware Ftp Server | =5.02r | |
Novell Netware Ftp Server | =5.02y | |
Novell NetWare | =5.1 | |
Novell NetWare | =6.0 | |
Novell NetWare | =6.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2003-1596 is considered a high-severity vulnerability due to its potential to allow unauthorized filesystem access.
To fix CVE-2003-1596, upgrade the FTP server in Novell NetWare to version 5.03.12 or later.
CVE-2003-1596 affects Novell NetWare FTP server versions up to 5.03b and certain specific versions including 5.01i, 5.01o, 5.01w, 5.01y, 5.02b, 5.02i, 5.02r, and 5.02y.
The systems vulnerable to CVE-2003-1596 include Novell NetWare versions 5.1, 6.0, and 6.5 along with specific FTP server versions.
Yes, CVE-2003-1596 can be exploited remotely through an FTP session by unauthorized attackers.