PT-2010-2108 · Novell · Novell Netware

Francis Provencher · Publicado 2010-01-15 · Atualizado 2018-10-10 · CVE-2010-0317

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Novell Netware version 6.5 SP8

Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference, memory consumption, ABEND, and crash. This is achieved by sending a large number of malformed or AFP requests that are not properly handled by the CIFS functionality in CIFS.nlm Semantic Agent or the AFP functionality in AFPTCP.nlm.

Recommendations For Novell Netware version 6.5 SP8, consider restricting access to the CIFS and AFP functionalities until a proper fix is available. As a temporary workaround, limiting the number of incoming requests may help minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2010-0317

Produtos afetados

Novell Netware

Referências · 10

• 🔥 http://exploit-db.com/exploits/11009 · Exploit
• 🔥 https://exploit-db.com/exploits/11009 · Exploit
• 🔥 http://securityfocus.com/bid/37616 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55389 · Nota
• http://securitytracker.com/id?1023400 · Nota
• http://protekresearch.blogspot.com/2010/01/prl-cifsnlm-memory-consumption-denial.html · Nota
• http://secunia.com/advisories/38114 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-0317 · Nota de Segurança
• http://vupen.com/english/advisories/2010/0041 · Aviso do Fabricante
• http://securityfocus.com/archive/1/508731/100/0/threaded · Nota