Novell
Page 7 of 7 — Novell CVEs from a corpus of 661, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2004-2105 | | 2004-12-31 | The webacc servlet in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to read arbitrary .htt files via a full pathname in the error pa… | |
CVE-2004-2104 | | 2004-12-31 | Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, including the internal IP address, via a direc… | |
CVE-2004-2103 | | 2004-12-31 | Cross-site scripting (XSS) vulnerability in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to process arbitrary script or HTML as oth… | |
CVE-2004-1457 | | 2004-12-31 | The Virtual Private Network (VPN) capability in Novell Bordermanager 3.8 allows remote attackers to cause a denial of service (ABEND in IKE.NLM) via a malforme… | |
CVE-2004-0112 | | 2004-11-23 | The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets du… | |
CVE-2004-0081 | | 2004-11-23 | OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demo… | |
CVE-2004-0079 | High | 7.5 | 2004-11-23 | The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafte… |
CVE-2005-1247 | | 2004-01-15 | webadmin.exe in Novell Nsure Audit 1.0.1 allows remote attackers to cause a denial of service via malformed ASN.1 packets in corrupt client certificates to an… | |
CVE-2003-1551 | | 2003-12-31 | Unspecified vulnerability in Novell GroupWise 6 SP3 WebAccess before Revision F has unknown impact and attack vectors related to "malicious script." | |
CVE-2003-0976 | | 2003-12-15 | NFS Server (XNFS.NLM) for Novell NetWare 6.5 does not properly enforce sys:\etc\exports when hostname aliases from sys:etc\hosts file are used, which could all… | |
CVE-2003-1150 | | 2003-10-27 | Buffer overflow in the portmapper service (PMAP.NLM) in Novell NetWare 6 SP3 and ZenWorks for Desktops 3.2 SP2 through 4.0.1 allows remote attackers to cause a… | |
CVE-2003-0639 | | 2003-08-27 | Unknown vulnerability in Novell iChain 2.2 before Support Pack 1 allows users to access restricted or secure pages without authentication. | |
CVE-2003-0638 | | 2003-08-27 | Multiple buffer overflows in Novell iChain 2.1 before Field Patch 3, and iChain 2.2 before Field Patch 1a, allow attackers to cause a denial of service (ABEND)… | |
CVE-2003-0637 | | 2003-08-27 | Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote attackers to guess u… | |
CVE-2003-0636 | | 2003-08-27 | Novell iChain 2.2 before Support Pack 1 does not properly verify that URL redirects match the DNS name of an accelerator, which allows attackers to redirect UR… | |
CVE-2003-0635 | | 2003-08-27 | Unknown vulnerability or vulnerabilities in Novell iChain 2.2 before Support Pack 1, with unknown impact, possibly related to unauthorized access to (1) NCPIP… | |
CVE-2003-0562 | | 2003-08-27 | Buffer overflow in the CGI2PERL.NLM PERL handler in Novell Netware 5.1 and 6.0 allows remote attackers to cause a denial of service (ABEND) via a long input st… | |
CVE-2002-1438 | | 2003-04-11 | The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to obtain Perl version information via the -v option. | |
CVE-2002-1437 | | 2003-04-11 | Directory traversal vulnerability in the web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to read arbitrary files via an… | |
CVE-2002-1436 | | 2003-04-11 | The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary Perl code via an HTTP POST request. | |
CVE-2002-1418 | | 2003-04-11 | Buffer overflow in the interpreter for Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote a… | |
CVE-2002-1417 | | 2003-04-11 | Directory traversal vulnerability in Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote att… | |
CVE-2002-1413 | | 2003-04-11 | RCONAG6 for Novell Netware SP2, while running RconJ in secure mode, allows remote attackers to bypass authentication using the RconJ "Secure IP" (SSL) option d… | |
CVE-2002-1552 | | 2003-03-31 | Novell eDirectory (eDir) 8.6.2 and Netware 5.1 eDir 85.x allows users with expired passwords to gain inappropriate permissions when logging in from Remote Mana… | |
CVE-2002-2119 | Critical | 9.8 | 2002-12-31 | Novell eDirectory 8.6.2 and 8.7 use case insensitive passwords, which makes it easier for remote attackers to conduct brute force password guessing. |
CVE-2002-2096 | | 2002-12-31 | Buffer overflow in Novell Remote Manager module, httpstk.nlm, in NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary code via a long (1) use… | |
CVE-2002-2083 | | 2002-12-31 | The Novell Netware client running on Windows 95 allows local users to bypass the login and open arbitrary files via the "What is this?" help feature, which can… | |
CVE-2002-1772 | | 2002-12-31 | Novell Netware 5.0 through 5.1 may allow local users to gain "Domain Admin" rights by logging into a Novell Directory Services (NDS) account, and executing "ne… | |
CVE-2002-1754 | | 2002-12-31 | Buffer overflow in Novell NetWare Client 4.80 through 4.83 allows local users to cause a denial of service (crash) by using ping, traceroute, or a similar util… | |
CVE-2002-1634 | | 2002-12-31 | Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) ndsobj.nlm, (2) allfield.jse, (3) websinfo… | |
CVE-2002-1283 | | 2002-11-29 | Buffer overflow in Novell iManager (eMFrame) before 1.5 allows remote attackers to cause a denial of service via an authentication request with a long Distingu… | |
CVE-2002-1088 | | 2002-10-04 | Buffer overflow in Novell GroupWise 6.0.1 Support Pack 1 allows remote attackers to execute arbitrary code via a long RCPT TO command. | |
CVE-2002-1002 | | 2002-10-04 | Buffer overflow in Novell iManager (eMFrame 1.2.1) allows remote attackers to cause a denial of service (crash) via a long user name. | |
CVE-2002-0997 | | 2002-10-04 | Buffer overflows in IMAP Agent (imapd) for Novell NetMail (NIMS) 3.0.3 before 3.0.3A allows remote attackers to cause a denial of service. | |
CVE-2002-0996 | | 2002-10-04 | Multiple buffer overflows in Novell NetMail (NIMS) 3.0.3 before 3.0.3C allows remote attackers to cause a denial of service and possibly execute arbitrary code… | |
CVE-2002-0930 | | 2002-10-04 | Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 (NWFTPD) allows remote attackers to cause a denial of service (ABEND) via format strin… | |
CVE-2002-0929 | | 2002-10-04 | Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of service (reboot) via long DHCP requests. | |
CVE-2002-0791 | | 2002-08-12 | Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service (CPU consumption) via a connection to the server followed by… | |
CVE-2002-0782 | | 2002-08-12 | Novell BorderManager 3.5 with PAT (Port-Address Translate) enabled allows remote attackers to cause a denial of service by filling the connection table with a… | |
CVE-2002-0781 | | 2002-08-12 | RTSP proxy for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a GET request to port 9090 followed by a series of carri… | |
CVE-2002-0780 | | 2002-08-12 | IP/IPX gateway for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a connection to port 8225 with a large amount of ran… | |
CVE-2002-0779 | | 2002-08-12 | FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service (network connectivity loss) via a connection to port 2… | |
CVE-2002-0530 | | 2002-08-12 | Cross-site scripting vulnerability in Novell Web Search 2.0.1 allows remote attackers to execute arbitrary script as other Web Search users via the search para… | |
CVE-2002-0341 | | 2002-06-25 | GWWEB.EXE in GroupWise Web Access 5.5, and possibly other versions, allows remote attackers to determine the full pathname of the web server via an HTTP reques… | |
CVE-2002-0303 | | 2002-05-31 | GroupWise 6, when using LDAP authentication and when Post Office has a blank username and password, allows attackers to gain privileges of other users by loggi… | |
CVE-1999-1081 | | 2002-01-15 | Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files. | |
CVE-2001-1580 | | 2001-12-31 | Directory traversal vulnerability in ScriptEase viewcode.jse for Netware 5.1 before 5.1 SP3 allows remote attackers to read arbitrary files via ".." sequences… | |
CVE-2001-1195 | | 2001-12-15 | Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager, which allows remote attackers to gain p… | |
CVE-2001-1458 | | 2001-10-15 | Directory traversal vulnerability in Novell GroupWise 5.5 and 6.0 allows remote attackers to read arbitrary files via a request for /servlet/webacc?User.html=… | |
CVE-2001-1233 | | 2001-08-14 | Netware Enterprise Web Server 5.1 running GroupWise WebAccess 5.5 with Novell Directory Services (NDS) enabled allows remote attackers to enumerate user names… | |
CVE-2001-1232 | | 2001-08-14 | GroupWise WebAccess 5.5 with directory indexing enabled allows a remote attacker to view arbitrary directory contents via an HTTP request with a lowercase "get… | |
CVE-2001-1231 | | 2001-08-14 | GroupWise 5.5 and 6 running in live remote or smart caching mode allows remote attackers to read arbitrary users' mailboxes by extracting usernames and passwor… | |
CVE-2001-0486 | | 2001-07-02 | Remote attackers can cause a denial of service in Novell BorderManager 3.6 and earlier by sending TCP SYN flood to port 353. | |
CVE-2001-0355 | | 2001-06-27 | Novell Groupwise 5.5 (sp1 and sp2) allows a remote user to access arbitrary files via an implementation error in Groupwise system policies. | |
CVE-1999-0805 | | 2001-03-12 | Novell NetWare Transaction Tracking System (TTS) in Novell 4.11 and earlier allows remote attackers to cause a denial of service via a large number of requests. | |
CVE-2000-0793 | | 2000-10-20 | Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the auto-protection service after the first user has logged off of the syste… | |
CVE-2000-0669 | | 2000-07-11 | Novell NetWare 5.0 allows remote attackers to cause a denial of service by flooding port 40193 with random data. | |
CVE-2000-0651 | | 2000-07-07 | The ClientTrust program in Novell BorderManager does not properly verify the origin of authentication requests, which could allow remote attackers to impersona… | |
CVE-2000-0591 | | 2000-07-05 | Novell BorderManager 3.0 and 3.5 allows remote attackers to bypass URL filtering by encoding characters in the requested URL. | |
CVE-2000-0600 | | 2000-06-26 | Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed URL. | |
CVE-2000-0257 | | 2000-04-19 | Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands via a long URL. | |
CVE-2000-0152 | | 2000-03-30 | Remote attackers can cause a denial of service in Novell BorderManager 3.5 by pressing the enter key in a telnet connection to port 2000. | |
CVE-2000-0146 | | 2000-02-07 | The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet. | |
CVE-1999-1382 | | 1999-12-31 | NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allows local users to gain root privileges… | |
CVE-1999-1320 | | 1999-12-31 | Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spoofing. | |
CVE-1999-1307 | | 1999-12-31 | Vulnerability in urestore in Novell UnixWare 1.1 allows local users to gain root privileges. | |
CVE-1999-1006 | | 1999-12-19 | Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parameter. | |
CVE-1999-1005 | | 1999-12-19 | Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter. | |
CVE-1999-1086 | | 1999-07-15 | Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain administrator privileges by spoofing the… | |
CVE-1999-0929 | | 1999-06-16 | Novell NetWare with Novell-HTTP-Server or YAWN web servers allows remote attackers to conduct a denial of service via a large number of HTTP GET requests. | |
CVE-1999-0470 | | 1999-04-09 | A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted. | |
CVE-1999-1020 | | 1998-09-18 | The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, which allows remote attackers to access sensitive… | |
CVE-1999-0524 | Medium | 4.0 | 1997-08-01 | ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts. |
CVE-1999-0265 | | 1997-01-01 | ICMP redirect messages may crash or lock up a host. | |
CVE-1999-0175 | | 1996-07-01 | The convert.bas program in the Novell web server allows a remote attackers to read any file on the system that is internally accessible by the web server. | |
CVE-1999-1215 | | 1993-09-16 | LOGIN.EXE program in Novell Netware 4.0 and 4.01 temporarily writes user name and password information to disk, which could allow local users to gain privilege… |