Vulnerability in Novell Netware
CVE-2004-2767
NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause a denial of service (connection slot exhaustion) by establishing many FTP sessions that persist for the lifetime of a DS session.
EPSS: 0.015 (72.4th percentile) — read the EPSS interpretation.
Affected products
- Novell Netware
- Novell Netware_ftp_server
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)