CVE-2004-2767

Published Apr 5, 2010 CVSS 2.0 · 4.3 Medium EPSS 1.5% KEV · Not listed
Description
NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause a denial of service (connection slot exhaustion) by establishing many FTP sessions that persist for the lifetime of a DS session.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2004-2757 NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause a denial of service (connection slot exhaustion) by establishing many FTP sessions that persist for the lifetime of a DS session.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Sep 16, 2024, 10:14 PM
Reserved
Apr 5, 2010, 12:00 AM
Status
Modified
Published
Apr 5, 2010, 3:30 PM
Modified
Jun 16, 2026, 10:10 PM