NetStorage for NetWare 6.5 sp8 patch 27012010

This document (5067520) is provided subject to the disclaimer at the end of this document.

patches this patch supersedes

This patch does not supersede any other patches.

patches that supersede this patch

This patch is not superseded by any other patches.

patch attributes

Security patch: Yes

Priority: Mandatory

Distribution Type: Public

http://download.novell.com/Download?buildid=jVmjkdAzJXc~

document

Revision: 1

Document ID: 5067520

Creation Date: 2010-02-10 08:59:06

abstract

This patch contains fixes to a number of bugs for NetStorage and Xtier, and is intended to be installed on a NetWare 6.5 SP8 server.

details

Overview:
This patch contains fixes for the following issues:
MS Office 2007 files downloaded as .zip may be corrupted during download
A German language bug for the Download and Lock string
Duplicate files when a directory name has a space in it
An Abend found in middle-tier
A NetStorage Arbitrary code execution vulnerability on NetWare 6.5 SP8 which was reported by researcher 1c239c43f521145fa8385d64a9c32243 through TippingPoint's Zero Day Initiative (ZDI). This has been marked as ZDI-CAN-607

System Requirements: NetWare 6.5SP8

Installation:
Extract the storage.zip file at the root of the sys: volume and reboot

Technical Support Information:
Information on the fix to the Security Vulnerability may be found here:
http://www.novell.com/support/viewContent.do?externalId=7005282&sliceId=1

security fixes

http://www.novell.com/support/viewContent.do?externalId=7005282&sliceId=1

file contents

Files Included	Size	Date
Storage.zip	2.0 MB (2103827)	2010-01-27 05:10:59
readme_5067520.html	N/A	2010-02-10 09:00:15

disclaimer

The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information. Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.

Novell is a registered trademark of Novell, Inc. in the United States and other countries. SUSE is a registered trademark of SUSE Linux AG, a Novell business. *All third-party trademarks are the property of their respective owners.