Novell Netware SMB Remote Buffer Overflow Vulnerability

Bugtraq ID:	40908
Class:	Boundary Condition Error
CVE:	CVE-2010-2351
Remote:	Yes
Local:	No
Published:	Jun 17 2010 12:00AM
Updated:	Apr 13 2015 09:02PM
Credit:	Laurent Gaffié
Vulnerable:	Novell Netware 6.5 SP7 Novell Netware 6.5 SP6 Novell Netware 6.5 SP5 Novell Netware 6.5 SP4 Novell Netware 6.5 SP1.1(b) Novell Netware 6.5 SP1.1(a) Novell Netware 6.5 SP3 Novell Netware 6.5 SP2 Novell Netware 6.5 SP1 Novell Netware 6.5 Novell Netware 6.0 SP3 Novell Netware 6.0 SP2 Novell Netware 6.0 SP1 Novell Netware 6.0 Novell Netware 6.5.0 SP8
Not Vulnerable:

Novell Netware SMB Remote Buffer Overflow Vulnerability

Netware is prone to a remote buffer-overflow vulnerability.

Attackers can exploit this issue to execute arbitrary code with kernel privileges. Failed attacks may cause a denial-of-service condition.

Netware versions 6.5 SP8 and prior are affected.

Novell Netware SMB Remote Buffer Overflow Vulnerability

The following proof-of-concept is available:

• /data/vulnerabilities/exploits/40908.py

Novell Netware SMB Remote Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.

Novell Netware SMB Remote Buffer Overflow Vulnerability

References:

• Novell Homepage (Novell)
  
• NSS Update for NetWare 6.5 Support Pack 8 2.0 (Novell)