Unscored severity · published Jan 15, 2010
CVE-2010-0317
Novell Netware 6.5 SP8 allows remote attackers to cause a denial of service (NULL pointer dereference, memory consumption, ABEND, and crash) via a large number of malformed or AFP…
–
CVSS
10.5%
EPSS
No
On KEV
Description
Novell Netware 6.5 SP8 allows remote attackers to cause a denial of service (NULL pointer dereference, memory consumption, ABEND, and crash) via a large number of malformed or AFP requests that are not properly handled by (1) the CIFS functionality in CIFS.nlm Semantic Agent (Build 163 MP) 3.27 or (2) the AFP functionality in AFPTCP.nlm Build 163 SP 3.27. NOTE: some of these details are obtained from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)10.5% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Netware · Novell
6.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-0317
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-0317
protekresearch.blogspot.com
http://protekresearch.blogspot.com/2010/01/prl-cifsnlm-memory-consumption-denial.html
Vendor Advisory
http://secunia.com/advisories/38114
Exploit
http://www.exploit-db.com/exploits/11009
www.securityfocus.com
http://www.securityfocus.com/archive/1/508731/100/0/threaded
Exploit
http://www.securityfocus.com/bid/37616
www.securitytracker.com
http://www.securitytracker.com/id?1023400
More from Netware
4.0
CVE-1999-0524
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts
–
CVE-2011-4191
Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitrary code or cause a denial of service…
–
CVE-2010-4228
Stack-based buffer overflow in NWFTPD.NLM before 5.10.02 in the FTP server in Novell NetWare allows remote authenticated users to execute arbitrary code or cause a denial of…
–
CVE-2010-4227
The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of service (abend) or execute arbitrary code via a crafted,…
–
CVE-2010-2351
Stack-based buffer overflow in the CIFS.NLM driver in Netware SMB 1.0 for Novell Netware 6.5 SP8 and earlier allows remote attackers to execute arbitrary code via a Sessions Setup…