CVE-2005-4888: Medium severity Novell Netware Ftp Server vulnerability
Published Apr 5, 2010
·Updated
NWFTPD.nlm before 5.06.04 in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (excessive stale connections) by establishing many FTP sessions, which persist in the Not-Logged-In state after each session is completed.
Affected Software
4 affected components
Novell Netware Ftp Server
Novell NetWare FTP Server
All of the following
Novell Netware Ftp Server
Novell NetWare FTP Server
Event History
Apr 5, 2010
CVE Published
via MITRE·03:15 PM
Data Sourced
via MITRE·03:15 PM
Description
Data Sourced
03:30 PM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·03:30 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2005-4888?
The severity of CVE-2005-4888 is moderate as it can lead to denial of service due to excessive stale connections.
2
How do I fix CVE-2005-4888?
To fix CVE-2005-4888, update NWFTPD.nlm to version 5.06.04 or later.
3
What type of attack does CVE-2005-4888 describe?
CVE-2005-4888 describes a denial of service attack that exploits persistent stale connections in the FTP server.
4
Which systems are affected by CVE-2005-4888?
CVE-2005-4888 affects Novell NetWare and the FTP server component within it.
5
Can CVE-2005-4888 be exploited remotely?
Yes, CVE-2005-4888 can be exploited remotely by establishing numerous FTP sessions.