PT-2010-3936 · Novell · Novell Netware+1

Laurent Gaffié · Published 2010-06-21 · Updated 2018-10-30 · CVE-2010-2351

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell Netware versions 6.5 SP8 and earlier

Description The issue is related to a stack-based buffer overflow in the CIFS.NLM driver. This occurs when processing a Sessions Setup AndX packet that contains a long AccountName. The overflow can be exploited by remote attackers to execute arbitrary code.

Recommendations For Novell Netware versions 6.5 SP8 and earlier, consider applying security patches or updates that address the stack-based buffer overflow in the CIFS.NLM driver. As a temporary workaround, restrict access to the CIFS.NLM driver to minimize the risk of exploitation.

Exploit

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-2351

Affected Products

Cifs.Nlm

Novell Netware

References · 10

• 🔥 http://securityfocus.com/bid/40908 · Exploit
• 🔥 http://exploit-db.com/exploits/13906 · Exploit
• 🔥 http://stratsec.net/Research/Advisories/SS-2010-006-Netware-SMB-Remote-Stack-Overflow · Exploit
• 🔥 https://exploit-db.com/exploits/13906 · Exploit
• http://download.novell.com/Download?buildid=tMWCI1cdI7s~ · Patch
• http://vupen.com/english/advisories/2010/1514 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2351 · Security Note
• http://secunia.com/advisories/40199 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2351 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59501 · Note