CVE-2004-2767 — MEDIUM (4.3)

Vulnerability Description

NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause a denial of service (connection slot exhaustion) by establishing many FTP sessions that persist for the lifetime of a DS session.

CVSS Score

4.3

MEDIUM

AV:N/AC:M/Au:N/C:N/I:N/A:P

Confidentiality

NONE

Integrity

NONE

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
Novell	Netware Ftp Server	All versions
Novell	Netware	All versions

Related Weaknesses (CWE)

CWE-264

References

http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1Vendor Advisory
http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1Vendor Advisory

FAQ

What is CVE-2004-2767?

CVE-2004-2767 is a vulnerability with a CVSS score of 4.3 (MEDIUM). NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause a denial of service (connection slot exhaustion) by establishi...

How severe is CVE-2004-2767?

CVE-2004-2767 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2004-2767?

Check the references section above for vendor advisories and patch information. Affected products include: Novell Netware Ftp Server, Novell Netware.