CVE-2007-6734

NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction, which allows remote authenticated users to access directories outside of the home server via unspecified vectors.

CVSS v2.0 4.0 MEDIUM

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1	Vendor Advisory
https://bugzilla.novell.com/show_bug.cgi?id=272093
http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1	Vendor Advisory
https://bugzilla.novell.com/show_bug.cgi?id=272093

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:novell:netware_ftp_server:*:*:*:*:*:*:*:*

cpe:2.3:o:novell:netware:6.5:sp7:*:*:*:*:*:*

History

No history.

Information

Published : 2010-04-05 15:30

Updated : 2025-04-11 00:51

NVD link : CVE-2007-6734

Mitre link : CVE-2007-6734

CVE.ORG link : CVE-2007-6734

JSON object : View

Products Affected

novell

netware
netware_ftp_server

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2007-6734", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-04-05T15:30:00.937", "references": [{"url": "http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://bugzilla.novell.com/show_bug.cgi?id=272093", "source": "cve@mitre.org"}, {"url": "http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://bugzilla.novell.com/show_bug.cgi?id=272093", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction, which allows remote authenticated users to access directories outside of the home server via unspecified vectors."}, {"lang": "es", "value": "NWFTPD.nlm anterior a v5.08.07 en el servidor FTP de Novell NetWare v6.5 SP7 no implementa adecuadamente la restricci\u00f3n FTPREST.TXT NOREMOTE, lo que permite a usuarios autenticados en remoto, empleando vectores no especificados, acceder a directorios fuera del servidor que lo aloja."}], "lastModified": "2025-04-11T00:51:21.963", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:novell:netware_ftp_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52FF91EA-4411-460E-9943-2427E884D3F2"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:novell:netware:6.5:sp7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CF0FC43C-4041-49B4-87AD-63D7BE17136D"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}