CVE-2004-2767
Last modified
CVE-2004-2767 is a vulnerability of currently unknown severity. NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause a denial of service (connection slot exhaustion) by establishing many FTP sessions that persist for the lifetime of a DS session.. EPSS estimates a 1.49% chance of exploitation in the next 30 days.
Description
NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause a denial of service (connection slot exhaustion) by establishing many FTP sessions that persist for the lifetime of a DS session.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Novell | Netware Ftp Server | All versions |
| Novell | Netware | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2004-2767?
How severe is CVE-2004-2767?
How do I fix CVE-2004-2767?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2004
- CVE-2004-2761The MD5 Message-Digest Algorithm is not collision resistant,…9.8
- CVE-2004-2762The server in IBM Tivoli Storage Manager (TSM) 4.2.x on MVS,…
- CVE-2004-2763The default configuration of Sun ONE/iPlanet Web Server 4.1 …
- CVE-2004-2764Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4…
- CVE-2004-2765Cross-site scripting (XSS) vulnerability in Webmail in Sun O…
- CVE-2004-2766Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messagin…
- CVE-2004-2768dpkg 1.9.21 does not properly reset the metadata of a file d…
- CVE-2004-2769Cerberus FTP Server before 4.0.3.0 allows remote authenticat…
- CVE-2004-2770Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2004-2771The expand function in fio.c in Heirloom mailx 12.5 and earl…
- CVE-2004-2772Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2004-2773Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
Are you affected by CVE-2004-2767?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST