6.5

CVE-2010-0625

Stack-based buffer overflow in NWFTPD.nlm before 5.10.01 in the FTP server in Novell NetWare 5.1 through 6.5 SP8 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long (1) MKD, (2) RMD, (3) RNFR, or (4) DELE command.

Data is provided by the National Vulnerability Database (NVD)
Novell ≫ Netware Ftp Server Version5.01i
Novell ≫ Netware Ftp Server Version5.01o
Novell ≫ Netware Ftp Server Version5.01w
Novell ≫ Netware Ftp Server Version5.01y
Novell ≫ Netware Ftp Server Version5.02b
Novell ≫ Netware Ftp Server Version5.02i
Novell ≫ Netware Ftp Server Version5.02r
Novell ≫ Netware Ftp Server Version5.02y
Novell ≫ Netware Ftp Server Version5.03b
Novell ≫ Netware Ftp Server Version5.03l
Novell ≫ Netware Ftp Server Version5.04.5
Novell ≫ Netware Ftp Server Version5.04.8
Novell ≫ Netware Ftp Server Version5.04.20
Novell ≫ Netware Ftp Server Version5.04.25
Novell ≫ Netware Ftp Server Version5.05
Novell ≫ Netware Ftp Server Version5.05.04
Novell ≫ Netware Ftp Server Version5.06.04
Novell ≫ Netware Ftp Server Version5.06.05
Novell ≫ Netware Ftp Server Version5.07
Novell ≫ Netware Ftp Server Version5.07.02
Novell ≫ Netware Version5.1
Novell ≫ Netware Version5.1 Updatesp2a
Novell ≫ Netware Version5.1 Updatesp3
Novell ≫ Netware Version5.1 Updatesp4
Novell ≫ Netware Version5.1 Updatesp6
Novell ≫ Netware Version6.0
Novell ≫ Netware Version6.0 Updatesp1
Novell ≫ Netware Version6.0 Updatesp2
Novell ≫ Netware Version6.0 Updatesp3
Novell ≫ Netware Version6.5
Novell ≫ Netware Version6.5 Updatesp1
Novell ≫ Netware Version6.5 Updatesp1.1a
Novell ≫ Netware Version6.5 Updatesp1.1b
Novell ≫ Netware Version6.5 Updatesp2
Novell ≫ Netware Version6.5 Updatesp3
Novell ≫ Netware Version6.5 Updatesp4
Novell ≫ Netware Version6.5 Updatesp5
Novell ≫ Netware Version6.5 Updatesp6
Novell ≫ Netware Version6.5 Updatesp7
Novell ≫ Netware Version6.5 Updatesp8
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 27.64% 0.963
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.5 8 6.4
AV:N/AC:L/Au:S/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.