Novell BorderManager Remote Denial Of Service Vulnerability

Bugtraq ID:	10727
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jul 15 2004 12:00AM
Updated:	Jul 15 2004 12:00AM
Credit:	The individual responsible for discovery of this issue is currently unknown; this issue was disclosed in the referenced vendor web advisory.
Vulnerable:	Novell BorderManager 3.8
Not Vulnerable:

Novell BorderManager Remote Denial Of Service Vulnerability

It has been reported that Novell BorderManager is affected by a remote denial of service vulnerability. This issue is due to a failure of the application to properly handle exceptional network input.

This issue will allow an attacker to cause the affected client computer hang, denying service to legitimate users. It has been reported that the computer must be restarted to return to a usable state.

Novell BorderManager Remote Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Novell BorderManager Remote Denial Of Service Vulnerability

Solution:
The vendor has released a patch dealing with this issue.


Novell BorderManager 3.8

• Novell bm38sp2a.exe
  http://support.novell.com/servlet/filedownload/sec/pub/bm38sp2a.exe

Novell BorderManager Remote Denial Of Service Vulnerability

References:

• BorderManager Product Homepage (Novell)
  
• VPN server abend in IKE.NLM when striker ISAKMP/VPN vulnerability tool executed (Novell)