Exploitation Summary
EIP tracks 3 public exploits for CVE-2011-4191. PoCs published by Francis Provencher.
AI-analyzed exploit summary This exploit targets a stack-based buffer overflow in Novell Netware's xnfs.nlm component via a malformed NLM_TEST RPC request. The PoC sends a crafted UDP packet to port 32779, exploiting the vulnerability to achieve remote code execution without authentication.
Description
Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitrary code or cause a denial of service (abend or NFS outage) via long packets.
Exploits (3)
This exploit targets a stack-based buffer overflow in Novell Netware's xnfs.nlm component via a malformed NLM_TEST RPC request. The PoC sends a crafted UDP packet to port 32779, exploiting the vulnerability to achieve remote code execution without authentication.
This exploit targets a stack-based buffer overflow in Novell Netware's XNFS.NLM component via a malformed STAT_NOTIFY RPC request. The PoC sends a crafted UDP packet to port 32778, potentially leading to remote code execution without authentication.
This Ruby script exploits a stack-based buffer overflow in Novell Netware's XNFS.NLM NFS RPC service (UDP port 2049) via a malformed NFS_RENAME request. The PoC sends a crafted RPC packet with an oversized filename length to trigger remote code execution.