Novell.Netware.OpenSSH.Stack.Overflow

Description

This indicates an attack attempt against a DLL-hijacking vulnerability in Novell Netware.
The vulnerability is caused by an error when SSHD.NLM resolves an overly long absolute path. It allows a remote attacker to execute arbitrary code via sending a crafted SSH client request.

Affected Products

Novell Netware v6.5

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Refer to the vendor's web site for the suggested workaround:
http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7006756&sliceId=1&docTypeID=DT_TID_1_1&dialogID=164386838&stateId=0%200%20164390561

References