CVE-2009-5153

Опубликовано: 21 нояб. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

In Novell NetWare before 6.5 SP8, a stack buffer overflow in processing of CALLIT RPC calls in the NFS Portmapper daemon in PKERNEL.NLM allowed remote unauthenticated attackers to execute code, because a length field was incorrectly trusted.

Ссылки

https://bugzilla.suse.com/show_bug.cgi?id=515804
Permissions Required
Third Party Advisory
https://download.novell.com/Download?buildid=1z3z-OsVCiE~
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-09-067/
Third Party Advisory
VDB Entry
https://bugzilla.suse.com/show_bug.cgi?id=515804
Permissions Required
Third Party Advisory
https://download.novell.com/Download?buildid=1z3z-OsVCiE~
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-09-067/
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microfocus:netware:*:*:*:*:*:*:*:*

Версия до 6.5 (включая)

cpe:2.3:a:microfocus:netware:6.5:sp1:*:*:*:*:*:*

cpe:2.3:a:microfocus:netware:6.5:sp2:*:*:*:*:*:*

cpe:2.3:a:microfocus:netware:6.5:sp3:*:*:*:*:*:*

cpe:2.3:a:microfocus:netware:6.5:sp4:*:*:*:*:*:*

cpe:2.3:a:microfocus:netware:6.5:sp5:*:*:*:*:*:*

cpe:2.3:a:microfocus:netware:6.5:sp6:*:*:*:*:*:*

cpe:2.3:a:microfocus:netware:6.5:sp7:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.10346

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-8rj8-7q6h-g4g9