Description (CNA)
The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via the PWD command.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://marc.info/?l=bugtraq&m=111091102023359&w=2
- http://www.infobyte.com.ar/adv/ISR-03.html
- http://securitytracker.com/id?1013407
- http://secunia.com/advisories/14537
- http://www.securityfocus.com/bid/12766
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096886.htm
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19643
ADP enrichment
No English description supplied.
- http://marc.info/?l=bugtraq&m=111091102023359&w=2
- http://www.infobyte.com.ar/adv/ISR-03.html
- http://securitytracker.com/id?1013407
- http://secunia.com/advisories/14537
- http://www.securityfocus.com/bid/12766
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096886.htm
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19643