CVE-2010-4227: Buffer Overflow
Published Feb 25, 2011
·Updated
The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of service (abend) or execute arbitrary code via a crafted, signed value in a NFS RPC request to port UDP 1234, leading to a stack-based buffer overflow.
Affected Software
8 affected components
Novell NetWare FTP Server=6.5
Novell NetWare FTP Server=6.5-sp1
Novell NetWare FTP Server=6.5-sp4
Novell NetWare FTP Server<=6.5
Novell NetWare FTP Server=6.5-sp2
Novell NetWare FTP Server=6.5-sp6
Novell NetWare FTP Server=6.5-sp3
Novell NetWare FTP Server=6.5-sp5
Remediation
Patch Available
Event History
Feb 25, 2011
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-4227?
CVE-2010-4227 has a high severity due to its potential to cause denial of service and arbitrary code execution.
2
How do I fix CVE-2010-4227?
To fix CVE-2010-4227, upgrade Novell NetWare to version 6.5 service pack 8 or later.
3
What exploit methods are associated with CVE-2010-4227?
CVE-2010-4227 can be exploited via crafted NFS RPC requests sent to port UDP 1234.
4
Which versions of Novell NetWare are affected by CVE-2010-4227?
CVE-2010-4227 affects Novell NetWare 6.5 versions up to service pack 7.
5
What types of vulnerabilities does CVE-2010-4227 represent?
CVE-2010-4227 represents a stack-based buffer overflow vulnerability leading to potential code execution.