CVE-2010-0317: Null Pointer Dereference
First published: Fri Jan 15 2010(Updated: )
Novell Netware 6.5 SP8 allows remote attackers to cause a denial of service (NULL pointer dereference, memory consumption, ABEND, and crash) via a large number of malformed or AFP requests that are not properly handled by (1) the CIFS functionality in CIFS.nlm Semantic Agent (Build 163 MP) 3.27 or (2) the AFP functionality in AFPTCP.nlm Build 163 SP 3.27. NOTE: some of these details are obtained from third party information.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Novell NetWare FTP Server | =6.5-sp8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securitytracker.com/id?1023400
- http://protekresearch.blogspot.com/2010/01/prl-cifsnlm-memory-consumption-denial.html
- http://www.securityfocus.com/bid/37616
- http://www.exploit-db.com/exploits/11009
- http://secunia.com/advisories/38114
- http://www.vupen.com/english/advisories/2010/0041
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55389
- http://www.securityfocus.com/archive/1/508731/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2010-0317?
CVE-2010-0317 has a medium severity rating due to its potential for denial of service attacks.
How do I fix CVE-2010-0317?
To mitigate CVE-2010-0317, it is recommended to apply patches or updates provided by Novell for Netware 6.5 SP8.
What types of attacks does CVE-2010-0317 allow?
CVE-2010-0317 allows remote attackers to cause denial of service through memory consumption and system crashes.
Which version of Novell Netware is affected by CVE-2010-0317?
CVE-2010-0317 affects Novell Netware version 6.5 Service Pack 8.
Is CVE-2010-0317 specific to a certain functionality?
Yes, CVE-2010-0317 specifically affects the CIFS functionality in the CIFS.nlm Semantic Agent.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/novell
- canonical/novell netware ftp server
- version/novell netware ftp server/6.5-sp8