Denial of Service attack against srvloc.sys

  • Document ID:3480790
  • Creation Date:29-Nov-2006
  • Modified Date:27-Apr-2012
    • Micro Focus Products:
      Client for Open Enterprise Server (Novell Client)

Environment

Novell Client for Windows 2000/XP/2003 4.91 Support Pack 2
491psp2_pkc.exe


Situation

DOS in srvloc.sys causing following condition:
IRQL_NOT_LESS_OR_EQUAL (a)

 An attempt was made to access a pageable (or completely invalid) address at

 an

 interrupt request level (IRQL) that is too high.  This is usually

 caused by drivers using improper addresses.

 If a kernel debugger is available get the stack backtrace.

 Arguments:

 Arg1: 00000006, memory referenced

 Arg2: 00000002, IRQL

 Arg3: 00000000, value 0 = read operation, 1 = write operation

 Arg4: 804204bd, address which referenced memory

This is caused by sending a specifically crafted packet to port 427.

Resolution

This is resolved in the Novell Client 4.91 sp3.

Status

Reported to Engineering
Security Alert

Additional Information

This vulnerability was found by Tyler Krpata.