Executive Summary
Summary | |
---|---|
Title | Novell NetWare NFS denial of service vulnerability |
Informations | |||
---|---|---|---|
Name | VU#578105 | First vendor Publication | 2007-06-27 |
Vendor | VU-CERT | Last vendor Modification | 2007-06-27 |
Severity (Vendor) | N/A | Revision | M |
Security-Database Scoring CVSS v3
Cvss vector : N/A | |||
---|---|---|---|
Overall CVSS Score | NA | ||
Base Score | NA | Environmental Score | NA |
impact SubScore | NA | Temporal Score | NA |
Exploitabality Sub Score | NA | ||
Calculate full CVSS 3.0 Vectors scores |
Security-Database Scoring CVSS v2
Cvss vector : (AV:N/AC:M/Au:N/C:N/I:N/A:C) | |||
---|---|---|---|
Cvss Base Score | 7.1 | Attack Range | Network |
Cvss Impact Score | 6.9 | Attack Complexity | Medium |
Cvss Expoit Score | 8.6 | Authentication | None Required |
Calculate full CVSS 2.0 Vectors scores |
Detail
Vulnerability Note VU#578105Novell NetWare NFS denial of service vulnerabilityOverviewThe Novell NetWare NFS mount daemon contains a denial of service vulnerability.I. DescriptionNetwork File System (NFS) is an ONC RPC based file and print sharing protocol. Novell Netware includes support for the NFS protocol.From Novell Support Document 3008097:
This makes the NetWare server vulnerable to denial-of-service attack, anytime XNFS.NLM is loaded. This vulnerability is not necessarily limited to NetWare 6.5 SP6. Older support packs are likely vulnerable as well. II. ImpactA remote, unauthenticated attacker may be able to create a denial of service condition.III. SolutionUpdateNovell has released an update to address this issue. See Novell support document 5004900 for details about patch availability.
References
Thanks to Novell for information that was used in this report. This document was written by Ryan Giobbi.
|
Original Source
Url : http://www.kb.cert.org/vuls/id/578105 |
CPE : Common Platform Enumeration
Type | Description | Count |
---|---|---|
Application | 1 |
Open Source Vulnerability Database (OSVDB)
Id | Description |
---|---|
37317 | Novell NetWare NFS Mount Daemon (XNFS.NLM) Mount Request Path Name Remote Ove... |