CVE-2003-1595 Security feature bypass in n/a

Critical 10.0 Published 5 Apr 2010 Updated 16 Sep 2024

Novell NetWare FTP server fails to properly perform intruder detection, allowing attackers to bypass security controls.

Exploited in the wild: Not known
Login needed: Not stated
Attackable: Over the internet
Victim action needed: Not stated
Fix: None listed

What is CVE-2003-1595?

CVE-2003-1595 is a critical vulnerability in Novell Netware, published on 5 Apr 2010. It can be exploited over the network.

Official description

NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly perform "intruder detection," which has unspecified impact and attack vectors.

Weakness: CWE-264

Which versions are affected by CVE-2003-1595?

It affects 2 products.

Products include Novell Netware, Novell Netware Ftp Server.

How do I fix CVE-2003-1595?

No fix has been published for CVE-2003-1595 yet. Limit exposure of the affected software until one is available.

Is CVE-2003-1595 being exploited?

There is no known exploitation of CVE-2003-1595 in the wild and no public exploit code.

All Novell Netware vulnerabilities

Sources

Also known as GHSA-3g7g-v7fj-pq74.