CVE-2003-1596

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-04-05 · updated 2026-06-16
Weakness: CWE-264

Description

NWFTPD.nlm before 5.03.12 in the FTP server in Novell NetWare does not properly restrict filesystem use by anonymous users with NFS Gateway home directories, which allows remote attackers to bypass intended access restrictions via an FTP session.

Affected products

Novell Netware: 5.1, 6.0, 6.5
Novell Netware Ftp Server: through 5.03b; 5.01i, 5.01o, 5.01w, 5.01y, 5.02b, 5.02i (+2)

References

http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1

Get alerted when CVE-2003-1596 or the next vulnerability affects your stack