PT-2010-2108 · Novell · Novell Netware

Francis Provencher · Published 2010-01-15 · Updated 2018-10-10 · CVE-2010-0317

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Novell Netware version 6.5 SP8

Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference, memory consumption, ABEND, and crash. This is achieved by sending a large number of malformed or AFP requests that are not properly handled by the CIFS functionality in CIFS.nlm Semantic Agent or the AFP functionality in AFPTCP.nlm.

Recommendations For Novell Netware version 6.5 SP8, consider restricting access to the CIFS and AFP functionalities until a proper fix is available. As a temporary workaround, limiting the number of incoming requests may help minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2010-0317

Affected Products

Novell Netware

References · 10

• 🔥 http://exploit-db.com/exploits/11009 · Exploit
• 🔥 https://exploit-db.com/exploits/11009 · Exploit
• 🔥 http://securityfocus.com/bid/37616 · Exploit
• http://secunia.com/advisories/38114 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0317 · Security Note
• http://vupen.com/english/advisories/2010/0041 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55389 · Note
• http://securitytracker.com/id?1023400 · Note
• http://protekresearch.blogspot.com/2010/01/prl-cifsnlm-memory-consumption-denial.html · Note
• http://securityfocus.com/archive/1/508731/100/0/threaded · Note