XNFS Abend when scanning NFS-related ports

  • 3502255
  • 11-May-2007
  • 27-Apr-2012

Environment

Novell NetWare 6.5

Defect Fix for DEFECT500290114

Situation

Abend in RPCWorker Process when Nessus Port Scanner scans a NetWare 6.5 server with NFS support active. Likely occurs while scanning port 1234, which is NetWare NFS's mount daemon port.

Server WESTNILE halted Monday, October 13, 2003 1:46:10.003 pm
Abend 1 on P00: Server-5.70: Page Fault Processor Exception (Error code 00000000)

Registers:
CS = 0060 DS = 007B ES = 007B FS = 007B GS = 007B SS = 0068
EAX = FD050620 EBX = A91B0000 ECX = 004E4724 EDX = A91B5000
ESI = A91B0000 EDI = 004E0C3C EBP = 00000000 ESP = B5586C20
EIP = 002ED4CF FLAGS = 00010287
002ED4CF 8A03 MOV AL, [EBX]=?
EIP in SERVER.NLM at code start +000EC0EFh
Access Location: 0xA91B0000

The violation occurred while processing the following instruction:
002ED4CF 8A03 MOV AL, [EBX]
002ED4D1 A2C9425000 MOV [005042C9]=00, AL
002ED4D6 E881ABF6FF CALL SERVER.NLM|VM_SPIN_LOCK
002ED4DB 53 PUSH EBX
002ED4DC E847B1F3FF CALL SERVER.NLM|GetExtendedPhysicalAddress
002ED4E1 83C404 ADD ESP, 00000004
002ED4E4 85D2 TEST EDX, EDX
002ED4E6 751F JNZ 002ED507
002ED4E8 83F8FE CMP EAX, 000000FE
002ED4EB 751A JNZ 002ED507

Running process: RPCWorker6 Process
Thread Owned by NLM: XNFS.NLM
Stack pointer: B5586C20
OS Stack limit: B557EC80
Scheduling priority: 67371008
Wait state: 5050090 Wait for interrupt
Stack: --A8093040 ?
--B5528180 ?
--A91B5000 ?
--B5586C58 ?
--B5528180 ?
B54FAFEA (XNFS.NLM|rpcWorkerThread+84F)
--A91AC000 ?
--00008400 ?
--00000000 ?
--00000000 ?
--00000000 ?
--00000000 ?
--65657246 ?
--00000000 ?
--00000000 ?

Resolution

Fix is available in NetWare 6.5 Support Pack 1 or higher.
(Note: Initially the fix was available in download XNFS1.EXE, for those still on NetWare 6.5 with no support pack. However, that download has been obsoleted and superceeded.)

Additional Information


Formerly known as TID# 10087844