CVE-2005-2852
Novell Netware 6.5 SP2/SP3, 5.1, 6.0 - Denial of Service via Incorrect CIFS Password Length
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-2852.
PoCs published by Metasploit, toto, including Metasploit module exploits/netware/smb/lsass_cifs.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in the Novell NetWare CIFS.NLM driver (CVE-2005-2852) via a malformed DCERPC request. It leverages a vulnerable function call to execute arbitrary payloads in kernel space, potentially causing system instability or crashes.
Description
Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a denial of service (ABEND) via an incorrect password length, as exploited by the "worm.rbot.ccc" worm.
Exploits (2)
This exploit targets a stack buffer overflow in the Novell NetWare CIFS.NLM driver (CVE-2005-2852) via a malformed DCERPC request. It leverages a vulnerable function call to execute arbitrary payloads in kernel space, potentially causing system instability or crashes.
This Metasploit module exploits a stack buffer overflow in the NetWare CIFS.NLM driver (CVE-2005-2852) via a maliciously crafted DCERPC call to achieve remote code execution. The exploit targets multiple NetWare 6.5 service packs and uses a push-esp-ret technique to redirect execution to the payload.