CVSS: 5.0EPSS: 1%CPEs: 8EXPL: 0CVE-2005-0746
https://notcve.org/view.php?id=CVE-2005-0746
The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via the PWD command. • http://marc.info/?l=bugtraq&m=111091102023359&w=2 http://secunia.com/advisories/14537 http://securitytracker.com/id?1013407 http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096886.htm http://www.infobyte.com.ar/adv/ISR-03.html http://www.securityfocus.com/bid/12766 https://exchange.xforce.ibmcloud.com/vulnerabilities/19643 •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2005-0744
https://notcve.org/view.php?id=CVE-2005-0744
The web GUI for Novell iChain 2.2 and 2.3 SP2 and SP3 allows attackers to hijack sessions and gain administrator privileges by (1) sniffing the connection on TCP port 51100 and replaying the authentication information or (2) obtaining and replaying the PCZQX02 authentication cookie from the browser. • http://secunia.com/advisories/14527 http://securitytracker.com/id?1013406 http://support.novell.com/cgi-bin/search/searchtid.cgi?/10096885.htm https://exchange.xforce.ibmcloud.com/vulnerabilities/19646 •
CVSS: 5.0EPSS: 1%CPEs: 12EXPL: 0CVE-2005-0296
https://notcve.org/view.php?id=CVE-2005-0296
NOTE: this issue has been disputed by the vendor. The error module in Novell GroupWise WebAccess allows remote attackers who have not authenticated to read potentially sensitive information, such as the version, via an incorrect login and a modified (1) error or (2) modify parameter that returns template files or the "about" information page. NOTE: the vendor has disputed this issue • http://marc.info/?l=bugtraq&m=110608203729814&w=2 http://support.novell.com/servlet/tidfinder/10096251 http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-01/0771.html http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-01/0341.html http://www.osvdb.org/13135 http://www.securityfocus.com/bid/12285 https://exchange.xforce.ibmcloud.com/vulnerabilities/18954 •
CVSS: 5.0EPSS: 1%CPEs: 2EXPL: 3CVE-2004-2104 – Novell Netware Enterprise Web Server 5.1/6.0 - env.bas Information Disclosure
https://notcve.org/view.php?id=CVE-2004-2104
Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, including the internal IP address, via a direct request to (1) snoop.jsp, (2) SnoopServlet, (3) env.bas, or (4) lcgitest.nlm. • https://www.exploit-db.com/exploits/23586 https://www.exploit-db.com/exploits/23587 https://www.exploit-db.com/exploits/23588 http://marc.info/?l=bugtraq&m=107487862304440&w=2 http://secunia.com/advisories/10711 http://www.osvdb.org/3715 http://www.osvdb.org/3720 http://www.osvdb.org/3721 http://www.osvdb.org/3722 http://www.osvdb.org/4952 http://www.securityfocus.com/bid/9479 https://exchange.xforce.ibmcloud.com/vulnerabilities/14921 •
CVSS: 5.8EPSS: 0%CPEs: 1EXPL: 0CVE-2004-2580
https://notcve.org/view.php?id=CVE-2004-2580
Cross-site scripting (XSS) vulnerability in Novell iChain 2.3 allows remote attackers to obtain login credentials via unspecified vectors. • http://secunia.com/advisories/12366 http://securitytracker.com/id?1011074 http://www.osvdb.org/9267 http://www.securityfocus.com/bid/11061 https://exchange.xforce.ibmcloud.com/vulnerabilities/17133 •