SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2002-2434

NWFTPD.nlm before 5.02i in the FTP server in Novell NetWare does not properly listen for data connections, which allows remote attackers to cause a denial of service (abend) via multiple FTP sessions.

MEDIUM 5.0EPSS 1.69%

Does this matter?

Lower severity and a low EPSS score (1.69%). Track it; it rarely justifies an emergency change on its own.

Description

NWFTPD.nlm before 5.02i in the FTP server in Novell NetWare does not properly listen for data connections, which allows remote attackers to cause a denial of service (abend) via multiple FTP sessions.

CVSS 2.0
5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
1.69% probability · 76th percentile
CISA KEV
Not listed
Affected
novell/netware ftp server · novell/netware
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.