Back to Database
Status published
Medium
CVE-2010-0625
Stack-based buffer overflow in NWFTPD.nlm before 5.10.01 in the FTP...
Vulnerability Description
Stack-based buffer overflow in NWFTPD.nlm before 5.10.01 in the FTP server in Novell NetWare 5.1 through 6.5 SP8 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long (1) MKD, (2) RMD, (3) RNFR, or (4) DELE command.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-0625
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
- http://www.vupen.com/english/advisories/2010/0742
- http://www.securityfocus.com/archive/1/510557/100/0/threaded
- http://secunia.com/advisories/39151
- http://www.zerodayinitiative.com/advisories/ZDI-10-062
- https://bugzilla.novell.com/show_bug.cgi?id=569496
- http://www.securityfocus.com/archive/1/510353/100/0/threaded
- http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=12&Itemid=12
- http://www.securityfocus.com/bid/39041
- http://securitytracker.com/id?1023768
More from novell
View All →CVE-2016-7052
crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a...
High
7.5
CVE-2016-5762
Integer overflow in the Post Office Agent in Novell GroupWise...
Critical
9.8
CVE-2016-5761
Cross-site scripting (XSS) vulnerability in Novell GroupWise before 2014 R2...
Medium
6.1
CVE-2016-5760
Multiple cross-site scripting (XSS) vulnerabilities in the administrator console in...
Medium
6.1
CVE-2016-5759
The mkdumprd script called "dracut" in the current working directory...
High
7.8
Affected Vendor
novell
View all reports →Affected Software
netware ftp server, netware
Vulnerable Versions:
5.01i, 5.01o, 5.01w, 5.01y, 5.02b, 5.02i, 5.02r, 5.02y, 5.03b, 5.03l, 5.04.5, 5.04.8, 5.04.20, 5.04.25, 5.05, 5.05.04, 5.06.04, 5.06.05, 5.07, 5.07.02, 5.1, 6.0, 6.5
Timeline
Official Publish:
April 5th, 2010
Last Modified:
August 7th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.