VulnerabilityModified

CVE-2003-1595

NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly perform "intruder detection," which has unspecified impact and attack vectors.

HIGH 10.0EPSS 1.67%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.67%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly perform "intruder detection," which has unspecified impact and attack vectors.

CVSS 2.0: 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS: 1.67% probability · 75th percentile
CISA KEV: Not listed
Weakness: CWE-264
Affected: novell/netware ftp server · novell/netware
Source: cve@mitre.org

References

http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1Vendor Advisory
http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.