TUCoPS :: Networks :: Wireless :: bt373.txt


Content-Type: text/plain; name="NOVL-2003-2966181 - HTTPSTK DOS.txt"
Content-Transfer-Encoding: 8bit
Content-Disposition: attachment; filename="NOVL-2003-2966181 - HTTPSTK DOS.txt"

Hash: SHA1

For Immediate Disclosure

============================== Summary ==============================

 Security Alert: NOVL-2003-2966181
          Title: HTTPSTK DOS
           Date: 03-Jun-2003
       Revision: Original
   Product Name: Netware
 OS/Platform(s): Netware 6.x
  Reference URL: http://support.novell.com/servlet/tidfinder/2966181
    Vendor Name: Novell, Inc. 
     Vendor URL: http://www.novell.com
Security Alerts: http://support.novell.com/security-alerts 
        Affects: HTTPSTK.NLM
    Identifiers: None
        Credits: Qualys Security Research Team <research@qualys.com>

============================ Description ============================

HTTPSTK.NLM to address an Abend in the Netware HTTP Stack caused by a
modified keep-alive packet.  

============================== Impact ===============================

HTTPSTK.NLM to address an Abend in the Netware HTTP Stack caused by a
modified keep-alive packet.  

======================== Recommended Actions ========================

See detailed instructions in the referenced Technical Information 
Document (TID) http://support.novell.com/servlet/tidfinder/2966181.

============================ DISCLAIMER =============================

The content of this document is believed to be accurate at the time 
of publishing based on currently available information. However, the 
information is provided "AS IS" without any warranty or 
representation. Your use of the document constitutes acceptance of 
this disclaimer. Novell disclaims all warranties, express or implied,
regarding this document, including the warranties of merchantability 
and fitness for a particular purpose. Novell is not liable for any 
direct, indirect, or consequential loss or damage arising from use 
of, or reliance on, this document or any security alert, even if 
Novell has been advised of the possibility of such damages and even 
if such damages are foreseeable.

============================ Appendices =============================


================ Contacting Novell Security Alerts ==================

To report suspected security vulnerabilities in Novell products, send
email to

or use the web form at our website


PGP users may send signed/encrypted information to us using our PGP 
key, available from the pgpkeys.mit.edu server, or our website.

Users wishing to be notified when Novell Security Alerts are issued 
may register their email address at


Security Alerts, Novell, Inc. PGP Key Fingerprint:

F5AE 9265 0A34 F84E 580E  9B87 3AC1 1974 DE05 0FDB

========================= Revision History ==========================
       Original: 03-Jun-2003 - Original Publication

Version: PGP Personal Security 7.0.3


Content-Type: text/plain; charset="us-ascii"
Content-description: footer

You are currently subscribed to security-alerts as: [bugtraq@securityfocus.com]
To unsubscribe, forward this message to leave-security-alerts-23015264B@list.novell.com


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH