CVE-2000-0257

Novell NetWare - Buffer Overflow via Long URL

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2000-0257. PoCs published by Michal Zalewski.

AI-analyzed exploit summary This script exploits a buffer overflow in the Netware Remote Administration utility by sending a maliciously crafted GET request with a large payload (4093 'A' characters) to trigger a DoS or potential arbitrary code execution. The script repeatedly sends these requests to exhaust the TCP/IP subsystem.

Description

Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands via a long URL.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Michal Zalewski · bashdosnetware
https://www.exploit-db.com/exploits/19854

This script exploits a buffer overflow in the Netware Remote Administration utility by sending a maliciously crafted GET request with a large payload (4093 'A' characters) to trigger a DoS or potential arbitrary code execution. The script repeatedly sends these requests to exhaust the TCP/IP subsystem.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: Netware Remote Administration utility (version not specified)
No auth needed
Prerequisites: Network access to the target server · Netware Remote Administration utility running on port 8008
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Exploit, Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/1118

Scores

EPSS 0.0348
EPSS Percentile 87.6%

Details

Status published
Products (1)
novell/netware 5.1
Published Apr 19, 2000
Tracked Since Feb 18, 2026