NWFTPD.nlm before 5.08.06 in the FTP server in Novell NetWare does not properly handle partial matches for container names in the FTPREST.TXT file, which allows remote attackers to bypass intended access restrictions via an FTP session.
References
Link | Resource |
---|---|
https://bugzilla.novell.com/show_bug.cgi?id=260459 | |
http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1 | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2010-04-05 08:30
Updated : 2010-04-06 07:22
NVD link : CVE-2007-6735
Mitre link : CVE-2007-6735
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
novell
- netware_ftp_server
- netware