CVE-2004-2767

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause a denial of service (connection slot exhaustion) by establishing many FTP sessions that persist for the lifetime of a DS session.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:N/A:P

Weakness enumeration

CWE-264

Affected software

No affected versions have been published.

Timeline

Published
Apr 5, 2010
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2004

CVE-2004-27687.2dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file in a package upgrade, which might allow local userCVE-2004-27694.0Cerberus FTP Server before 4.0.3.0 allows remote authenticated users to list hidden files, even when the "Display hidden files" option is enCVE-2004-27717.5The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitraryCVE-2004-27769.8go.cgi in GoScript 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) query string or (2) artarchCVE-2004-277710.0GE Healthcare Centricity Image Vault 3.x has a password of (1) gemnet for the administrator account, (2) webadmin for the webadmin administrCVE-2004-27787.1Ebuild in Gentoo may change directory and file permissions depending on the order of installed packages, which allows local users to read orCVE-2004-27797.5id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggeri