[CIRT.DK - Advisory] Novell eDirectory 8.7.3 DOS Device name Denial of Service

["CIRT.DK Advisory" <advisory () cirt dk>]

ID: NOVL102201 
Domain: primus Solution 
Class: Novell Fact: Novell eDirectory 8.7.3 for Windows 2000 Fact Novell
eDirectory 8.7.3 for Windows NT 
Symptom: Requesting "DOS Device in Path Name" Denial of Service 
Symptom: Attack causes error in dhost.exe application 
Symptom: Attack causes nds service to stop until manually restarted. 
Symptom: Problem is not reproducible when using the current interm release
for eDirectory 8.7.3 which is currently IR6


Read the full advisory at http://www.cirt.dk

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/