CVE-2004-2767

NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause a denial of service (connection slot exhaustion) by establishing many FTP sessions that persist for the lifetime of a DS session.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:novell:netware_ftp_server:*:*:*:*:*:*:*:*
cpe:2.3:o:novell:netware:*:*:*:*:*:*:*:*

History

20 Nov 2024, 23:54

Type Values Removed Values Added
References () http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1 - Vendor Advisory () http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1 - Vendor Advisory

Information

Published : 2010-04-05 15:30

Updated : 2024-11-20 23:54


NVD link : CVE-2004-2767

Mitre link : CVE-2004-2767

CVE.ORG link : CVE-2004-2767


JSON object : View

Products Affected

novell

  • netware_ftp_server
  • netware
CWE
CWE-264

Permissions, Privileges, and Access Controls