A remote overflow exists in Netware Webserver. The Netware Webserver fails to limit the amount of data submitted to the perl interpreter through the perl virtual directory resulting in a buffer overflow. With a specially crafted request, an attacker can cause an overflow resulting in a loss of availability.
Classification
Location:
Remote / Network Access
Attack Type:
Denial of Service,
Input Manipulation
Impact:
Loss of Integrity,
Loss of Availability
Solution
Upgrade to version Netware 6 SP3 or higher, as it has been reported to fix this vulnerability. In addition, Novell has released a patch for some older versions.
protego.dk -
