CVE-2010-0625

EPSS 5.09%
Veröffentlicht 05.04.2010 16:30:00
Zuletzt bearbeitet 16.06.2026 23:16:31
Erkennungen
Login

Stack-based buffer overflow in NWFTPD.nlm before 5.10.01 in the FTP server in Novell NetWare 5.1 through 6.5 SP8 allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long (1) MKD, (2) RMD, (3) RNFR, or (4) DELE command.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 13

NVD 40 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Novell ≫ Netware Ftp Server Version 5.01i

Novell ≫ Netware Ftp Server Version 5.01o

Novell ≫ Netware Ftp Server Version 5.01w

Novell ≫ Netware Ftp Server Version 5.01y

Novell ≫ Netware Ftp Server Version 5.02b

Novell ≫ Netware Ftp Server Version 5.02i

Novell ≫ Netware Ftp Server Version 5.02r

Novell ≫ Netware Ftp Server Version 5.02y

Novell ≫ Netware Ftp Server Version 5.03b

Novell ≫ Netware Ftp Server Version 5.03l

Novell ≫ Netware Ftp Server Version 5.04.5

Novell ≫ Netware Ftp Server Version 5.04.8

Novell ≫ Netware Ftp Server Version 5.04.20

Novell ≫ Netware Ftp Server Version 5.04.25

Novell ≫ Netware Ftp Server Version 5.05

Novell ≫ Netware Ftp Server Version 5.05.04

Novell ≫ Netware Ftp Server Version 5.06.04

Novell ≫ Netware Ftp Server Version 5.06.05

Novell ≫ Netware Ftp Server Version 5.07

Novell ≫ Netware Ftp Server Version 5.07.02

Novell ≫ Netware Version 5.1

Novell ≫ Netware Version 5.1 Update sp2a

Novell ≫ Netware Version 5.1 Update sp3

Novell ≫ Netware Version 5.1 Update sp4

Novell ≫ Netware Version 5.1 Update sp6

Novell ≫ Netware Version 6.0

Novell ≫ Netware Version 6.0 Update sp1

Novell ≫ Netware Version 6.0 Update sp2

Novell ≫ Netware Version 6.0 Update sp3

Novell ≫ Netware Version 6.5

Novell ≫ Netware Version 6.5 Update sp1

Novell ≫ Netware Version 6.5 Update sp1.1a

Novell ≫ Netware Version 6.5 Update sp1.1b

Novell ≫ Netware Version 6.5 Update sp2

Novell ≫ Netware Version 6.5 Update sp3

Novell ≫ Netware Version 6.5 Update sp4

Novell ≫ Netware Version 6.5 Update sp5

Novell ≫ Netware Version 6.5 Update sp6

Novell ≫ Netware Version 6.5 Update sp7

Novell ≫ Netware Version 6.5 Update sp8

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	5.09%	0.913

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	6.5	8	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1

http://secunia.com/advisories/39151

Vendor Advisory

http://securitytracker.com/id?1023768

http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=12&Itemid=12

http://www.securityfocus.com/archive/1/510353/100/0/threaded

http://www.securityfocus.com/archive/1/510557/100/0/threaded

http://www.securityfocus.com/bid/39041

http://www.vupen.com/english/advisories/2010/0742

Vendor Advisory

http://www.zerodayinitiative.com/advisories/ZDI-10-062

https://bugzilla.novell.com/show_bug.cgi?id=569496

https://nvd.nist.gov/vuln/detail/CVE-2010-0625

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-0625

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-0625

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2010-0625