CVE:CVE-2010-0625
CNNVD:CNNVD-201004-071
Novell Netware是一款商业性质的网络操作系统。
Novell Netware的FTP服务器中的NWFTPD.nlm中存在基于栈的缓冲区溢出漏洞。远程攻击者可以通过向Novell Netware内嵌的FTP服务器提交包含有多个“A”字符的恶意mkdir和rmdir请求触发栈溢出，导致执行任意代码。
solution:Upgrade novell netware_ftp_server to a higher version than 5.01i,5.01o,5.01w,5.01y,5.02b,5.02i,5.02r,5.02y,5.03b,5.03l,5.04.5,5.04.8,5.04.20,5.04.25,5.05,5.05.04,5.06.04,5.06.05,5.07,5.07.02,and avoid the version 5.01i,5.01o,5.01w,5.01y,5.02b,5.02i,5.02r,5.02y,5.03b,5.03l,5.04.5,5.04.8,5.04.20,5.04.25,5.05,5.05.04,5.06.04,5.06.05,5.07,5.07.02; Upgrade novell netware to a higher version than 5.1,5.1:sp2a,5.1:sp3,5.1:sp4,5.1:sp6,6.0,6.0:sp1,6.0:sp2,6.0:sp3,6.5,6.5:sp1,6.5:sp1.1a,6.5:sp1.1b,6.5:sp2,6.5:sp3,6.5:sp4,6.5:sp5,6.5:sp6,6.5:sp7,6.5:sp8,and avoid the version 5.1,5.1:sp2a,5.1:sp3,5.1:sp4,5.1:sp6,6.0,6.0:sp1,6.0:sp2,6.0:sp3,6.5,6.5:sp1,6.5:sp1.1a,6.5:sp1.1b,6.5:sp2,6.5:sp3,6.5:sp4,6.5:sp5,6.5:sp6,6.5:sp7,6.5:sp8