Francis Provencher has reported a vulnerability in Novell NetWare, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to a NULL-pointer dereference error in the AFPTCP.nlm module. This can be exploited to crash an affected system by sending a specially crafted AFP request to TCP port 548.

The vulnerability is reported in NetWare version 6.5 SP8. Other versions may also be affected.

Solution
Restrict TCP access to port 548.

Provided and/or discovered by
Francis Provencher, Protek Research Lab's

Changelog
Further details available in Customer Area

Original Advisory
http://protekresearch.blogspot.com/2010/01/prl-cifsnlm-memory-consumption-denial.html

Deep Links
Links available in Customer Area