First published: Mon Jun 21 2010(Updated: )
Stack-based buffer overflow in the CIFS.NLM driver in Netware SMB 1.0 for Novell Netware 6.5 SP8 and earlier allows remote attackers to execute arbitrary code via a Sessions Setup AndX packet with a long AccountName.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Novell NetWare | =6.5 | |
Novell NetWare | =6.0-sp1 | |
Novell NetWare | =6.5-sp1 | |
Novell NetWare | =5.1 | |
Novell NetWare | =6.5-sp4 | |
Novell NetWare | =6.0-sp3 | |
Novell NetWare | =5.0-sp3 | |
Novell NetWare | =6.0-sp4 | |
Novell NetWare | =6.5-sp2 | |
Novell NetWare | =6.5-sp6 | |
Novell NetWare | =6.0 | |
Novell NetWare | =6.0-sp5 | |
Novell NetWare | =6.5-sp3 | |
Novell NetWare | =6.5-sp7 | |
Novell NetWare | =6.5-sp5 | |
Novell NetWare | =5.1-sp8 | |
Novell NetWare | =5.0 | |
Novell NetWare | =5.1-sp7 | |
Novell NetWare | =6.0-sp2 | |
Novell NetWare | <=6.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-2351 is classified as a critical vulnerability due to its ability to allow remote attackers to execute arbitrary code.
To fix CVE-2010-2351, you should upgrade to a patched version of the Netware SMB driver provided by Novell.
CVE-2010-2351 affects users running Novell Netware 5.0, 5.1, or 6.0 through 6.5 SP8.
CVE-2010-2351 is a stack-based buffer overflow vulnerability.
Yes, CVE-2010-2351 can be exploited remotely through specially crafted Sessions Setup AndX packets.