Denial of Service and Code Execution Vulnerability in Novell Netware 6.5 NFS
CVE-2010-4227
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 38%
What is CVE-2010-4227?
The xdrDecodeString function within the NFS component of Novell Netware 6.5 prior to Service Pack 8 is susceptible to a vulnerability that can be exploited by remote attackers. By sending a specially crafted and signed value in an NFS RPC request directed to UDP port 1234, an attacker can cause a denial of service, potentially crashing the application, or may execute arbitrary code, leading to severe impacts on system integrity and security. This flaw underscores the importance of promptly applying security updates and monitoring NFS interactions.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.