CVE-2005-0746

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-05-02 · updated 2026-06-16

Description

The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via the PWD command.

Affected products

Novell Ichain: 2.2, 2.2-sp1, 2.2-sp1a, 2.2-sp2, 2.2-sp3, 2.2.113 (+2)

References

http://marc.info/?l=bugtraq&m=111091102023359&w=2
http://secunia.com/advisories/14537
http://securitytracker.com/id?1013407
http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096886.htm
http://www.infobyte.com.ar/adv/ISR-03.html
http://www.securityfocus.com/bid/12766
https://exchange.xforce.ibmcloud.com/vulnerabilities/19643
http://marc.info/?l=bugtraq&m=111091102023359&w=2
http://secunia.com/advisories/14537
http://securitytracker.com/id?1013407
http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096886.htm
http://www.infobyte.com.ar/adv/ISR-03.html

Get alerted when CVE-2005-0746 or the next vulnerability affects your stack