BID:13067

Novell NetWare TCP Stack Remote Denial Of Service Vulnerability

Info

Novell NetWare TCP Stack Remote Denial Of Service Vulnerability

Bugtraq ID:	13067
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2005-1060
Remote:	Yes
Local:	No
Published:	Apr 08 2005 12:00AM
Updated:	Jul 12 2009 12:56PM
Credit:	The individual or individuals responsible for the discovery of this issue are currently unknown; the vendor disclosed this issue.
Vulnerable:	Novell Netware 6.5 SP1.1(b) Novell Netware 6.5 SP1.1(a) Novell Netware 6.5 SP3 Novell Netware 6.5 SP2 Novell Netware 6.5 SP1 Novell Netware 6.5 Novell Netware 6.0 SP3 Novell Netware 6.0 SP2 Novell Netware 6.0 SP1 Novell Netware 6.0

Not Vulnerable:

Discussion

Novell NetWare TCP Stack Remote Denial Of Service Vulnerability

A remote denial of service vulnerability affects Novell NetWare. This issue is due to a failure of the TCP stack to handle exceptional network traffic.

An attacker may leverage this issue to cause the TCP/IP stack implementation of an affected computer to crash, denying access to the network for legitimate users.

Exploit / POC

Novell NetWare TCP Stack Remote Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Novell NetWare TCP Stack Remote Denial Of Service Vulnerability

Solution:
The vendor has released Technical Information Documents TID2970467 and TID2970468 dealing with this issue. Please see the referenced information documents for more information.

Novell Netware 6.0 SP3