Novell BorderManager Remote Denial Of Service Vulnerability

Bugtraq ID:	17031
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Mar 08 2006 12:00AM
Updated:	Mar 10 2006 11:25PM
Credit:	The individual responsible for discovery of this issue is currently unknown; this issue was disclosed in the referenced vendor web advisory.
Vulnerable:	Novell BorderManager 3.8 Novell BorderManager 3.8 SP4
Not Vulnerable:	Novell BorderManager 3.8 SP4 2a

Novell BorderManager Remote Denial Of Service Vulnerability

Novell BorderManager is affected by a remote denial-of-service vulnerability. This issue is due to a failure of the application to properly handle exceptional network input.

This issue will allow an attacker to cause the affected client computer to hang, denying service to legitimate users.

Novell BorderManager Remote Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Novell BorderManager Remote Denial Of Service Vulnerability

Solution:
The vendor has released a patch dealing with this issue.


Novell BorderManager 3.8 SP4

• Novell bm38sp4_ir2a.exe
  http://support.novell.com/servlet/filedownload/pub/bm38sp4_ir2a.exe

Novell BorderManager 3.8

• Novell bm38sp4_ir2a.exe
  http://support.novell.com/servlet/filedownload/pub/bm38sp4_ir2a.exe

Novell BorderManager Remote Denial Of Service Vulnerability

References:

• BorderManager 3.8 POST SP4 Interim Release-2a - TID2972993 (Novell)
  
• BorderManager Product Homepage (Novell)