CVE-2010-0317

Currently unrated

Key Information:

Vendor
Novell
Status
Netware
Vendor
CVE Published:
15 January 2010

Summary

Novell Netware 6.5 SP8 allows remote attackers to cause a denial of service (NULL pointer dereference, memory consumption, ABEND, and crash) via a large number of malformed or AFP requests that are not properly handled by (1) the CIFS functionality in CIFS.nlm Semantic Agent (Build 163 MP) 3.27 or (2) the AFP functionality in AFPTCP.nlm Build 163 SP 3.27. NOTE: some of these details are obtained from third party information.

References

http://www.vupen.com/english/advisories/2010/0041
vdb-entryx_refsource_VUPEN
http://www.securitytracker.com/id?1023400
vdb-entryx_refsource_SECTRACK
http://protekresearch.blogspot.com/2010/01/prl-cifsnlm-me...
x_refsource_MISC

EPSS Score

10% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.