CVE-2010-4227

Novell Netware < 6.5 SP8 - Remote Code Execution via Crafted NFS RPC Request

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2010-4227. PoCs published by Francis Provencher.

AI-analyzed exploit summary This exploit sends a malformed UDP packet to a NetWare server's MOUNT service (RPC program 10005) to trigger a denial-of-service condition. The payload is a crafted RPC call with a NULL verifier, causing the service to crash.

Description

The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of service (abend) or execute arbitrary code via a crafted, signed value in a NFS RPC request to port UDP 1234, leading to a stack-based buffer overflow.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Francis Provencher · rubydosnetware
https://www.exploit-db.com/exploits/16234

This exploit sends a malformed UDP packet to a NetWare server's MOUNT service (RPC program 10005) to trigger a denial-of-service condition. The payload is a crafted RPC call with a NULL verifier, causing the service to crash.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: Novell NetWare (MOUNT service)
No auth needed
Prerequisites: Network access to the target server · UDP port 1234 (or specified port) accessible
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (11)

Core 11
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/65625
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/46535
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0497
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-11-090
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/8104
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/43431
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/16234
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1025119
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/516645/100/0/threaded

Scores

EPSS 0.1682
EPSS Percentile 96.6%

Details

CWE
CWE-119
Status published
Products (2)
novell/netware 6.5 (7 CPE variants)
novell/netware < 6.5
Published Feb 25, 2011
Tracked Since Feb 18, 2026