Exploit Novell Netware 5.0 SP5/6.0 SP1 - SMDR.NLM Denial of Service

[Exploiter]

EDB-ID

20072

Проверка EDB

1. Пройдено

Автор

DIMUTHU PARUSSALLA

Тип уязвимости

DOS

Платформа

NOVELL

CVE

cve-2000-0669

Дата публикации

2000-07-11

source: https://www.securityfocus.com/bid/1467/info

When Novell Netware is configured with IPX-Compatibility enabled, it is vulnerable to a denial of service attack by sending packets with random data to port 40193. Similar results are possible by sending fragmented packets. This has been observed on Novell Netware 5.0 service pack 5, other versions may be vulnerable. 

This behaviour has also been reported on Novell Netware 6.0 service pack 1. 

It should be noted that configuration of Netware with IPX is not supported and it is not advised for production servers.

Using the tool 'netcat':

# cat /dev/urandom | nc XXX.XXX.XXX.XXX 40193