Vulnerabilities (CVE)

Filtered by vendor Novell Subscribe
Total 675 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-1757 1 Novell 1 Netmail 2025-04-03 7.5 HIGH N/A
Buffer overflow in the Modweb agent for Novell NetMail 3.52 before 3.52C, when renaming folders, may allow attackers to execute arbitrary code.
CVE-2002-1437 1 Novell 1 Netware 2025-04-03 5.0 MEDIUM N/A
Directory traversal vulnerability in the web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to read arbitrary files via an HTTP request containing "..%5c" (URL-encoded dot-dot backslash) sequences.
CVE-1999-0265 2 Microware, Novell 2 Os-9, Netware 2025-04-03 5.0 MEDIUM N/A
ICMP redirect messages may crash or lock up a host.
CVE-1999-0175 1 Novell 1 Web Server 2025-04-03 5.0 MEDIUM N/A
The convert.bas program in the Novell web server allows a remote attackers to read any file on the system that is internally accessible by the web server.
CVE-2005-0819 1 Novell 1 Netware 2025-04-03 5.0 MEDIUM N/A
The xvesa code in Novell Netware 6.5 SP2 and SP3 allows remote attackers to redirect the xsession without authentication via a direct request to GUIMirror/Start.
CVE-2005-0797 1 Novell 1 Ichain 2025-04-03 5.0 MEDIUM N/A
Novell iChain Mini FTP Server 2.3 displays different error messages if a user exists or not, which allows remote attackers to obtain sensitive information and facilitates brute force attacks.
CVE-1999-1382 1 Novell 1 Netware 2025-04-03 7.2 HIGH N/A
NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allows local users to gain root privileges by creating a setuid program and setting it to "Read Only," which NetWare-NFS changes to a setuid root program.
CVE-2006-3268 1 Novell 1 Groupwise 2025-04-03 5.0 MEDIUM N/A
Unspecified vulnerability in the Windows Client API in Novell GroupWise 5.x through 7 might allow users to obtain "random programmatic access" to other email within the same post office.
CVE-1999-0470 1 Novell 1 Netware 2025-04-03 5.0 MEDIUM N/A
A weak encryption algorithm is used for passwords in Novell Remote.NLM, allowing them to be easily decrypted.
CVE-2002-1438 1 Novell 1 Netware 2025-04-03 5.0 MEDIUM N/A
The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to obtain Perl version information via the -v option.
CVE-2005-1730 1 Novell 1 Imanager 2025-04-03 9.3 HIGH N/A
Multiple vulnerabilities in the OpenSSL ASN.1 parser, as used in Novell iManager 2.0.2, allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted packets, as demonstrated by "OpenSSL ASN.1 brute forcer." NOTE: this issue might overlap CVE-2004-0079, CVE-2004-0081, or CVE-2004-0112.
CVE-2004-2336 1 Novell 2 Groupwise, Netware 2025-04-03 5.0 MEDIUM N/A
Unknown vulnerability in Novell GroupWise and GroupWise WebAccess 6.0 through 6.5, when running with Apache Web Server 1.3 for NetWare where Apache is loaded using GWAPACHE.CONF, allows remote attackers to read directories and files on the server.
CVE-2002-1418 1 Novell 2 Netware, Small Business Suite 2025-04-03 5.0 MEDIUM N/A
Buffer overflow in the interpreter for Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote attackers to cause a denial of service (ABEND) via a long module name.
CVE-2005-3655 1 Novell 1 Open Enterprise Server 2025-04-03 7.5 HIGH N/A
Heap-based buffer overflow in Novell Open Enterprise Server Remote Manager (novell-nrm) in Novell SUSE Linux Enterprise Server 9 allows remote attackers to execute arbitrary code via an HTTP POST request with a negative Content-Length parameter.
CVE-2002-0782 1 Novell 1 Bordermanager 2025-04-03 5.0 MEDIUM N/A
Novell BorderManager 3.5 with PAT (Port-Address Translate) enabled allows remote attackers to cause a denial of service by filling the connection table with a large number of connection requests to hosts that do not have a specific route, which may be forwarded to the public interface.
CVE-2003-0636 1 Novell 1 Ichain 2025-04-03 7.5 HIGH N/A
Novell iChain 2.2 before Support Pack 1 does not properly verify that URL redirects match the DNS name of an accelerator, which allows attackers to redirect URLs to malicious web sites.
CVE-2006-0736 1 Novell 2 Linux Desktop, Open Enterprise Server 2025-04-03 10.0 HIGH N/A
Stack-based buffer overflow in the pam_micasa PAM authentication module in CASA on Novell Linux Desktop 9 and Open Enterprise Server 1 allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2003-0637 1 Novell 1 Ichain 2025-04-03 5.0 MEDIUM N/A
Novell iChain 2.2 before Support Pack 1 uses a shorter timeout for a non-existent user than a valid user, which makes it easier for remote attackers to guess usernames and conduct brute force password guessing.
CVE-2005-1758 1 Novell 1 Netmail 2025-04-03 7.5 HIGH N/A
Buffer overflow in the IMAP command continuation function in Novell NetMail 3.52 before 3.52C may allow remote attackers to execute arbitrary code.
CVE-2002-0929 1 Novell 1 Netware 2025-04-03 5.0 MEDIUM N/A
Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of service (reboot) via long DHCP requests.