Vulnerability Details : CVE-2007-6734

NWFTPD.nlm before 5.08.07 in the FTP server in Novell NetWare 6.5 SP7 does not properly implement the FTPREST.TXT NOREMOTE restriction, which allows remote authenticated users to access directories outside of the home server via unspecified vectors.

Published 2010-04-05 15:30:01

Updated 2010-04-06 04:00:00

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2007-6734

Probability of exploitation activity in the next 30 days: 0.59%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 75 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2007-6734

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
4.0	MEDIUM	AV:N/AC:L/Au:S/C:P/I:N/A:N	8.0	2.9	nvd@nist.gov
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None

CWE ids for CVE-2007-6734

CWE-264

Assigned by: nvd@nist.gov (Primary)

References for CVE-2007-6734

http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1

What fixes are in NWFTPD.NLM v5.10.02, March 9, 2011?
Vendor Advisory

CVEs referencing this url
https://bugzilla.novell.com/show_bug.cgi?id=272093

Products affected by CVE-2007-6734

Novell » Netware » Version: 6.5 Update SP7
cpe:2.3:o:novell:netware:6.5:sp7:*:*:*:*:*:*
Matching versions
Novell » Netware Ftp Server
cpe:2.3:a:novell:netware_ftp_server:*:*:*:*:*:*:*:*
Matching versions