CVE-2010-4227

published 2011-02-25

CVE-2010-4227: The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of service (abend) or execute arbitrary…

critical 10 CVSS 3.1

AV N AC L Au N C C I C A C

EXPLOIT

The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of service (abend) or execute arbitrary code via a crafted, signed value in a NFS RPC request to port UDP 1234, leading to a stack-based buffer overflow.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
novell	netware	<= 6.5	—
novell	netware	—	—

CWE-119