CVE-2005-0746: Medium severity Novell iChain vulnerability
Published Mar 13, 2005
·Updated
The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via the PWD command.
Affected Software
8 affected components
Novell iChain=2.2
Novell iChain=2.2-sp1
Novell iChain=2.2-sp1a
Novell iChain=2.2-sp2
Novell iChain=2.2-sp3
Novell iChain=2.2.113
Novell iChain=2.3
Novell iChain=2.3-sp2
Event History
Mar 13, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0746?
CVE-2005-0746 has a medium severity rating due to the potential exposure of sensitive server path information.
2
How do I fix CVE-2005-0746?
To mitigate CVE-2005-0746, it is recommended to upgrade the Novell iChain software to the latest version available.
3
Which versions of Novell iChain are affected by CVE-2005-0746?
CVE-2005-0746 impacts Novell iChain versions 2.2 and 2.3 SP2 and earlier.
4
What type of attack does CVE-2005-0746 allow?
CVE-2005-0746 allows remote unauthenticated attackers to exploit the FTP server via the PWD command.
5
Is authentication required to exploit CVE-2005-0746?
No, CVE-2005-0746 can be exploited by remote attackers without authentication.