PT-2002-2476 · Novell · Novell Netware Client

Published 2002-12-31 · Updated 2017-07-11 · CVE-2002-1754

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Novell NetWare Client versions 4.80 through 4.83

Description A buffer overflow issue allows local users to cause a denial of service by using utilities like ping or traceroute to resolve a large hostname, leading to a crash.

Recommendations For Novell NetWare Client versions 4.80 through 4.83, consider restricting the use of utilities that can force the client to resolve large hostnames as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2002-1754

Affected Products

Novell Netware Client

References · 4

• http://cqure.net/advisories.jsp?id=15 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1754 · Security Note
• http://support.novell.com/servlet/tidfinder/2962694 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9035 · Note