CVE-2010-0317

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Novell Netware - CIFS and AFP Remote Memory Consumption Denial of Service2010-01-05 · dos · multiple · Verified

Impact

Novell Netware 6.5 SP8 allows remote attackers to cause a denial of service (NULL pointer dereference, memory consumption, ABEND, and crash) via a large number of malformed or AFP requests that are not properly handled by (1) the CIFS functionality in CIFS.nlm Semantic Agent (Build 163 MP) 3.27 or (2) the AFP functionality in AFPTCP.nlm Build 163 SP 3.27. NOTE: some of these details are obtained from third party information.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://protekresearch.blogspot.com/2010/01/prl-cifsnlm-memory-consumption-denial.html
• http://secunia.com/advisories/38114
• http://www.exploit-db.com/exploits/11009
• http://www.securityfocus.com/archive/1/508731/100/0/threaded
• http://www.securityfocus.com/bid/37616
• http://www.securitytracker.com/id?1023400
• http://www.vupen.com/english/advisories/2010/0041
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55389
• http://protekresearch.blogspot.com/2010/01/prl-cifsnlm-memory-consumption-denial.html
• http://secunia.com/advisories/38114
• http://www.exploit-db.com/exploits/11009
• http://www.securityfocus.com/archive/1/508731/100/0/threaded
• http://www.securityfocus.com/bid/37616
• http://www.securitytracker.com/id?1023400
• http://www.vupen.com/english/advisories/2010/0041
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55389