← Database

CVE-2004-2767

MEDIUM CVSS: 4.3 Published: 2010-04-05 Modified: 2026-06-16

Description

NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause a denial of service (connection slot exhaustion) by establishing many FTP sessions that persist for the lifetime of a DS session.

Affected Platforms

Novell NetwareNovell Netware Ftp Server

Weakness Type

CWE-264

References