what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files

Novell Netware RPC XNFS xdrDecodeString Code Execution

Posted Feb 24, 2011

Authored by Francis Provencher

Novell Netware RPC XNFS xdrDecodeString proof of concept exploit that demonstrates an arbitrary code execution vulnerability.

tags | exploit, arbitrary, code execution, proof of concept

advisories | CVE-2010-4227

SHA-256 | 9bee9619b110c9cc533ba4115cbc37e05b3dbe59c286619fd9d13cdafbbc7aa2

Download | Favorite | View

Related Files

Zero Day Initiative Advisory 11-090

Posted Feb 24, 2011

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 11-090 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Netware. Authentication is not required to exploit this vulnerability. The flaw exists within the XNFS.NLM component which listens by default on UDP port 1234. When handling the an NFS RPC request the xdrDecodeString function uses a user supplied length value to null terminate a string. This value can be signed allowing the NULL byte to be written at an arbitrary address. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the system.

tags | advisory, remote, arbitrary, udp

advisories | CVE-2010-4227

SHA-256 | 6ff956732b5f7f5743b6b55d69eb36425aa86fc4836dc1a32c8a0cabd05749ea

Download | Favorite | View