Buffer Overflow Vulnerability in Novell NetWare FTP Server

CVE-2003-1592

Summary

Multiple buffer overflow vulnerabilities exist in the NWFTPD.nlm component of the FTP server in Novell NetWare. These vulnerabilities, which affect versions 6.0 prior to SP4 and 6.5 prior to SP1, can be exploited by remote attackers to trigger a denial of service (abend) by supplying excessively long usernames or passwords. Proper security measures must be taken to mitigate the risks associated with these vulnerabilities.

References