Novell Netware FTP Server Denial Of Service Vulnerability

Bugtraq ID:	17137
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 17 2006 12:00AM
Updated:	Mar 17 2006 11:10PM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	Novell Netware FTP Server 5.07 Novell Netware 6.5 SP4
Not Vulnerable:

Novell Netware FTP Server Denial Of Service Vulnerability

Netware FTP Server is prone to a remote denial-of-service vulnerability.

An attacker may cause the application to crash, thus denying service to legitimate users. Arbitrary code execution may also be possible; this has not been confirmed.

Novell Netware FTP Server Denial Of Service Vulnerability

This issue can be exploited via an FTP client.

Novell Netware FTP Server Denial Of Service Vulnerability

Solution:
The vendor has released an update to address this issue. Contact the vendor for details on obtaining and applying the appropriate updates.


Novell Netware FTP Server 5.07

• Novell nwftpd12.exe
  http://support.novell.com/servlet/filedownload/sec/pub/nwftpd12.exe

Novell Netware FTP Server Denial Of Service Vulnerability

References:

• Novell Support (Novell)
  
• TID2973435 - NWFTPD March 2006 Abend Fix (Novell)