Novell Netware CIFS.NLM Remote Denial of Service Vulnerability

Bugtraq ID:	12204
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jan 05 2005 12:00AM
Updated:	Jan 05 2005 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Novell Netware 6.0 SP3 Novell Netware 6.0 SP2 Novell Netware 6.0 SP1 Novell Netware 6.0 Novell Netware 5.1 SP6 Novell Netware 5.1 SP4 Novell Netware 5.1 SP5 Novell Netware 5.1
Not Vulnerable:

Novell Netware CIFS.NLM Remote Denial of Service Vulnerability

Netware CIFS.NLM is reportedly prone to a remote denial of service vulnerability. Reportedly, this attack results in a hard lock denying service to legitimate users.

Netware 5.1 and 6.0 are reported to be vulnerable.

Novell Netware CIFS.NLM Remote Denial of Service Vulnerability

An exploit is not required.

Novell Netware CIFS.NLM Remote Denial of Service Vulnerability

Solution:
Novell has released TID2970488 to address this issue. This fix can be installed on NetWare 5.1 SP4 or later and NetWare 6 SP1 or later.


Novell Netware 5.1 SP4

• Novell cifspt6.exe
  http://support.novell.com/servlet/filedownload/sec/pub/cifspt6.exe

Novell Netware 5.1 SP6

• Novell cifspt6.exe
  http://support.novell.com/servlet/filedownload/sec/pub/cifspt6.exe

Novell Netware 5.1 SP5

• Novell cifspt6.exe
  http://support.novell.com/servlet/filedownload/sec/pub/cifspt6.exe

Novell Netware 6.0 SP2

• Novell cifspt6.exe
  http://support.novell.com/servlet/filedownload/sec/pub/cifspt6.exe

Novell Netware 6.0 SP1

• Novell cifspt6.exe
  http://support.novell.com/servlet/filedownload/sec/pub/cifspt6.exe

Novell Netware 6.0 SP3

• Novell cifspt6.exe
  http://support.novell.com/servlet/filedownload/sec/pub/cifspt6.exe

Novell Netware CIFS.NLM Remote Denial of Service Vulnerability

References:

• TID2970488 - CIFS update for NW 5.1 and 6.0 (Novell)