A vulnerability has been identified in Novell NetWare, which could be exploited by attackers to cause a denial of service. This issue is caused by a buffer overflow error in the NFS server (XNFS.NLM) when processing a mount command containing an overly long path (more than 508 characters), which could be exploited by a malicious client to cause a vulnerable server to abend, creating a denial of service condition.

Affected Products

Novell NetWare version 6.5 Support Pack 6 and prior

Solution

Apply patch :
http://download.novell.com/Download?buildid=8XdJVBDYifk~

References

http://www.vupen.com/english/advisories/2007/2221
https://secure-support.novell.com/KanisaPlatform/Publishing/23/3008097_f.SAL_Public.html
http://download.novell.com/SummaryFree.jsp?buildid=8XdJVBDYifk~

Credits

Vulnerability reported by the vendor.

Changelog

2007-06-15 : Initial release

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.