Novell NetWare XNFS.NLM Remote Denial Of Service Vulnerability

Bugtraq ID:	24489
Class:	Boundary Condition Error
CVE:	CVE-2007-3207
Remote:	Yes
Local:	No
Published:	Jun 15 2007 12:00AM
Updated:	Jun 28 2007 03:18AM
Credit:	The vendor disclosed this issue.
Vulnerable:	Novell Netware 6.5 SP6
Not Vulnerable:

Novell NetWare XNFS.NLM Remote Denial Of Service Vulnerability

Novell NetWare is prone to a remote denial-of-service vulnerability because of inadequate boundary checks.

A remote attacker can exploit this issue to deny access to legitimate users and possibly to execute code, but this has not been confirmed.

NetWare 6.5 SP6 is vulnerable; other versions may also be affected.

Novell NetWare XNFS.NLM Remote Denial Of Service Vulnerability

An attacker can exploit this issue via a NetWare client.

Novell NetWare XNFS.NLM Remote Denial Of Service Vulnerability

Solution:
The vendor has released a fix to address this issue. Please see the references for more information.


Novell Netware 6.5 SP6

• Novell xnfs6a.zip
  MD5 dc6a813c249d16a94ac42c6f2197d209
  http://download.novell.com/sendredirect?target=%2Ffree%2F8XdJVBDYifk%7 E%2Fxnfs6a.zip&buildid=8XdJVBDYifk~&fileid=QSEKQSA8zG8~&mirror=AkamaiH ost

Novell NetWare XNFS.NLM Remote Denial Of Service Vulnerability

References:

• Novell Homepage (Novell)
  
• Vulnerability Note VU#578105 Novell NetWare NFS denial of service vulnerability (US-CERT)
  
• XNFS Abend in rpcWorkerThread if nfs mount is attempted with long path (Novell)