CVE-2010-2351: Buffer Overflow
Published Jun 21, 2010
·Updated
Stack-based buffer overflow in the CIFS.NLM driver in Netware SMB 1.0 for Novell Netware 6.5 SP8 and earlier allows remote attackers to execute arbitrary code via a Sessions Setup AndX packet with a long AccountName.
Affected Software
20 affected components
Novell NetWare FTP Server=6.5
Novell NetWare FTP Server=6.0-sp1
Novell NetWare FTP Server=6.5-sp1
Novell NetWare FTP Server=5.1
Novell NetWare FTP Server=6.5-sp4
Novell NetWare FTP Server=6.0-sp3
Novell NetWare FTP Server=5.0-sp3
Novell NetWare FTP Server=6.0-sp4
Novell NetWare FTP Server=6.5-sp2
Novell NetWare FTP Server=6.5-sp6
Novell NetWare FTP Server=6.0
Novell NetWare FTP Server=6.0-sp5
Novell NetWare FTP Server=6.5-sp3
Novell NetWare FTP Server=6.5-sp7
Novell NetWare FTP Server=6.5-sp5
Novell NetWare FTP Server=5.1-sp8
Novell NetWare FTP Server=5.0
Novell NetWare FTP Server=5.1-sp7
Novell NetWare FTP Server=6.0-sp2
Novell NetWare FTP Server<=6.5
Remediation
Patch Available
Event History
Jun 21, 2010
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-2351?
CVE-2010-2351 is classified as a critical vulnerability due to its ability to allow remote attackers to execute arbitrary code.
2
How do I fix CVE-2010-2351?
To fix CVE-2010-2351, you should upgrade to a patched version of the Netware SMB driver provided by Novell.
3
Who is affected by CVE-2010-2351?
CVE-2010-2351 affects users running Novell Netware 5.0, 5.1, or 6.0 through 6.5 SP8.
4
What type of vulnerability is CVE-2010-2351?
CVE-2010-2351 is a stack-based buffer overflow vulnerability.
5
Can CVE-2010-2351 be exploited remotely?
Yes, CVE-2010-2351 can be exploited remotely through specially crafted Sessions Setup AndX packets.