PT-2010-3936 · Novell · Novell Netware+1

Laurent Gaffié · Publicado 2010-06-21 · Atualizado 2018-10-30 · CVE-2010-2351

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell Netware versions 6.5 SP8 and earlier

Description The issue is related to a stack-based buffer overflow in the CIFS.NLM driver. This occurs when processing a Sessions Setup AndX packet that contains a long AccountName. The overflow can be exploited by remote attackers to execute arbitrary code.

Recommendations For Novell Netware versions 6.5 SP8 and earlier, consider applying security patches or updates that address the stack-based buffer overflow in the CIFS.NLM driver. As a temporary workaround, restrict access to the CIFS.NLM driver to minimize the risk of exploitation.

Exploit

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2010-2351

Produtos afetados

Cifs.Nlm

Novell Netware

Referências · 10

• 🔥 http://securityfocus.com/bid/40908 · Exploit
• 🔥 http://exploit-db.com/exploits/13906 · Exploit
• 🔥 http://stratsec.net/Research/Advisories/SS-2010-006-Netware-SMB-Remote-Stack-Overflow · Exploit
• 🔥 https://exploit-db.com/exploits/13906 · Exploit
• http://download.novell.com/Download?buildid=tMWCI1cdI7s~ · Correção
• http://vupen.com/english/advisories/2010/1514 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-2351 · Nota de Segurança
• http://secunia.com/advisories/40199 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2351 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59501 · Nota