The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via the PWD command.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Ichain | Novell | 2.2 (including) | 2.2 (including) |
Ichain | Novell | 2.2-sp1 (including) | 2.2-sp1 (including) |
Ichain | Novell | 2.2-sp1a (including) | 2.2-sp1a (including) |
Ichain | Novell | 2.2-sp2 (including) | 2.2-sp2 (including) |
Ichain | Novell | 2.2-sp3 (including) | 2.2-sp3 (including) |
Ichain | Novell | 2.2.113 (including) | 2.2.113 (including) |
Ichain | Novell | 2.3 (including) | 2.3 (including) |
Ichain | Novell | 2.3-sp2 (including) | 2.3-sp2 (including) |