PT-2010-1233 · Novell · Nwftpd.Nlm
CVE-2007-6735
·
Publicado
2010-04-05
·
Atualizado
2010-04-06
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Novell NetWare NWFTPD.nlm versions prior to 5.08.06
Description
The issue arises from improper handling of partial matches for container names in the FTPREST.TXT file by the FTP server in Novell NetWare. This allows remote attackers to bypass intended access restrictions during an FTP session.
Recommendations
For versions prior to 5.08.06, update NWFTPD.nlm to version 5.08.06 or later to resolve the issue.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Nwftpd.Nlm