Novell NetWare iPrint denial of service
| novell-netware-iprint-dos (41588) |  Low Risk |
Description:
Novell NetWare is vulnerable to a denial of service. By installing an iPrint printer or by sending a request from the Macintosh iPrint Client to print to an iPrint printer, a remote attacker from within the local network could exploit this vulnerability to cause the server to ABEND or crash.
Platforms Affected:
- Novell, NetWare 6.5
Remedy:
Refer to Novell Security Alert Document ID: 3842033 for patch, upgrade or suggested workaround information. See References.
Consequences:
Denial of Service
References:
- Novell Security Alert Document ID: 3842033, NetWare 6.5 server ABENDs in LIBC and Apache2 on iPrint server at https://secure-support.novell.com/KanisaPlatform/Publishing/667/3842033_f.SAL_Public.html.
- BID-28561: Novell NetWare iPrint Request Handling Denial Of Service Vulnerability
- CVE-2008-1701: Novell NetWare 6.5 allows attackers to cause a denial of service (ABEND) via a crafted Macintosh iPrint client request.
- FrSIRT/ADV-2008-1074: Novell NetWare Macintosh iPrint Client Denial of Service Vulnerability
- SA29587: Novell NetWare iPrint Request Denial of Service
- SECTRACK ID: 1019750: Novell NetWare 'IPPSRVR.NLM' Bug Lets Remote Users Deny Service
Reported:
Apr 01, 2008
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Copyright (c) 1994-2008 Internet Security Systems, Inc. All rights reserved worldwide.
For corrections or additions please email xforce@iss.net