OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Patrik Karlsson (patrikcqure.net)
Date: Tue Jun 25 2002 - 14:49:33 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    cqure.net Security Vulnerability Report
    No: cqure.net.20020604.netware_dhcpsrvr
    =======================================

    Vulnerability Summary
    ---------------------
    Problem: The Netware DHCP server has a DOS
                            vulnerability.

    Threat: An attacker could cause the Netware server
                            to reboot, simple by issueing a
                            "non-standard" dhcp request.

    Affected Software: Novell Netware FTP server.

    Platforms: Netware 6.0 verified SP 1.

    Solutions: Install patches from Novell as soon as
                            they become available.

    Vulnerability Description
    -------------------------
    The DHCP server suffers from multiple bufferoverflows which can be
    triggered by sending oversized "non-standard" requests to the DHCP
    server.

    Additional Information
    ----------------------
    Novell was contacted 20020604.

    This vulnerability was found by
    Patrik Karlsson & Jonas Ländin
    patrikcqure.net
    jonascqure.net

    This document is also available at: http://www.cqure.net/advisories/