high7.5Public exploit code
CVE-2011-4191
Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitrary code or cause a …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Novell Netware - XNFS caller_name xdrDecodeString Remote Code Execution2012-01-10 · dos · netware · Verified
- Novell Netware - XNFS.NLM STAT Notify Remote Code Execution2012-01-06 · dos · netware · Verified
- Novell Netware - XNFS.NLM NFS Rename Remote Code Execution2012-01-06 · dos · netware · Verified
Impact
Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitrary code or cause a denial of service (abend or NFS outage) via long packets.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Novell | Netware | Version 6.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://download.novell.com/Download?buildid=Cfw1tDezgbw~
- https://bugzilla.novell.com/show_bug.cgi?id=671020
- https://bugzilla.novell.com/show_bug.cgi?id=702491
- http://download.novell.com/Download?buildid=Cfw1tDezgbw~
- https://bugzilla.novell.com/show_bug.cgi?id=671020
- https://bugzilla.novell.com/show_bug.cgi?id=702491