Novell Netware NWFTPD Username Format String Vulnerability

Bugtraq ID:	5099
Class:	Input Validation Error
CVE:	CVE-2002-0930
Remote:	Yes
Local:	No
Published:	Jun 25 2002 12:00AM
Updated:	Jul 11 2009 01:56PM
Credit:	Vulnerability discovery credited to Patrik Karlsson <[email protected]> and Jonas Ländin <[email protected]>.
Vulnerable:	Novell Netware 6.0 SP1
Not Vulnerable:

Novell Netware NWFTPD Username Format String Vulnerability

Netware is a commercially available operating system distributed by Novell.

Under some circumstances, it may be possible to remotely crash a NWFTPD server. NWFTPD reacts unpredictably when it receives format strings in the form of usernames. This could ultimately result in users of the FTP server being unable to access data stored on the server.

Novell Netware NWFTPD Username Format String Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Novell Netware NWFTPD Username Format String Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Novell Netware NWFTPD Username Format String Vulnerability

References: