CVE-2003-1594

Description

NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly enforce FTPREST.TXT settings, which allows remote attackers to bypass intended access restrictions via an FTP session.

Affected products

• Novell / netware6.5 – 6.5
• Novell / netware_ftp_server

References

• MISChttp://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1