CVE-2010-4227 : The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of s

The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of service (abend) or execute arbitrary code via a crafted, signed value in a NFS RPC request to port UDP 1234, leading to a stack-based buffer overflow.

Published 2011-02-25 19:00:01

Updated 2018-10-10 20:07:31

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowExecute codeDenial of service

Threat overview for CVE-2010-4227

Top countries where our scanners detected CVE-2010-4227

Top open port discovered on systems with this issue 80

IPs affected by CVE-2010-4227 2

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2010-4227!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2010-4227

Probability of exploitation activity in the next 30 days: 94.03%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 99 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2010-4227

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2010-4227

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2010-4227

http://www.securityfocus.com/archive/1/516645/100/0/threaded

SecurityFocus
http://www.securitytracker.com/id?1025119

NetWare XNFS Stack Overflow Lets Remote Users Execute Arbitrary Code - SecurityTracker
http://www.securityfocus.com/bid/46535

Novell Netware 'XNFS.NLM' Component Remote Code Execution Vulnerability
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/65625

Novell Netware xdrDecodeString() code execution CVE-2010-4227 Vulnerability Report
http://download.novell.com/Download?buildid=1z3z-OsVCiE~

Downloads - NetWare XNFS security updates
Patch
http://www.vupen.com/english/advisories/2011/0497

Webmail | OVH- OVH
Vendor Advisory
http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=24&Itemid=24

Exploit
http://www.exploit-db.com/exploits/16234

Novell Netware - RPC XNFS xdrDecodeString - Netware dos Exploit
Exploit
http://securityreason.com/securityalert/8104

Novell Netware RPC XNFS xdrDecodeString Vulnerability - CXSecurity.com
http://www.zerodayinitiative.com/advisories/ZDI-11-090

ZDI-11-090 | Zero Day Initiative

Products affected by CVE-2010-4227