CVE-2005-2852

This exploit targets a stack buffer overflow in the Novell NetWare CIFS.NLM driver (CVE-2005-2852) via a malformed DCERPC request. It leverages a vulnerable function call to execute arbitrary payloads in kernel space, potentially causing system instability or crashes.

This Metasploit module exploits a stack buffer overflow in the NetWare CIFS.NLM driver (CVE-2005-2852) via a maliciously crafted DCERPC call to achieve remote code execution. The exploit targets multiple NetWare 6.5 service packs and uses a push-esp-ret technique to redirect execution to the payload.