Novell Netware 'NWFTPD.NLM' DELE Command Remote Buffer Overflow Vulnerability

Bugtraq ID:	46922
Class:	Boundary Condition Error
CVE:	CVE-2010-4228
Remote:	Yes
Local:	No
Published:	Mar 18 2011 12:00AM
Updated:	Mar 21 2011 03:26PM
Credit:	Francis Provencher
Vulnerable:	Novell Netware 6.5 SP7 Novell Netware 6.5 SP6 Novell Netware 6.5 SP5 Novell Netware 6.5 SP4 Novell Netware 6.5 SP1.1(b) Novell Netware 6.5 SP1.1(a) Novell Netware 6.5 SP3 Novell Netware 6.5 SP2 Novell Netware 6.5 SP1 Novell Netware 6.5 Novell Netware 6.0 SP3 Novell Netware 6.0 SP2 Novell Netware 6.0 SP1 Novell Netware 6.0 Novell Netware 6.5.0 SP8
Not Vulnerable:

Novell Netware 'NWFTPD.NLM' DELE Command Remote Buffer Overflow Vulnerability

Novell Netware is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Attackers can exploit this issue to execute arbitrary code with kernel privileges. Failed attacks may cause a denial-of-service condition.

Novell Netware 'NWFTPD.NLM' DELE Command Remote Buffer Overflow Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/46922.py

Novell Netware 'NWFTPD.NLM' DELE Command Remote Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.

Novell Netware 'NWFTPD.NLM' DELE Command Remote Buffer Overflow Vulnerability

References:

• FTP for NW65SP8, security fix (Novell)
  
• Novell Homepage (Novell)
  
• ZDI-11-106 Novell Netware NWFTPD.NLM DELE Remote Code Execution Vulnerability (Zero Day Initiative)