CVE-2004-2767

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-04-05 · updated 2026-06-16
Weakness: CWE-264

Description

NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause a denial of service (connection slot exhaustion) by establishing many FTP sessions that persist for the lifetime of a DS session.

Affected products

Novell Netware: all versions
Novell Netware Ftp Server: all versions

References

http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1

Get alerted when CVE-2004-2767 or the next vulnerability affects your stack