CVE-2009-5153

high-risk

Published 2018-11-21

In Novell NetWare before 6.5 SP8, a stack buffer overflow in processing of CALLIT RPC calls in the NFS Portmapper daemon in PKERNEL.NLM allowed remote unauthenticated attackers to execute code, because a length field was incorrectly trusted.

Do I need to act?

8.9% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Affected Products (8)

Netware

Affected Vendors

Microfocus

References (6)

Permissions Required https://bugzilla.suse.com/show_bug.cgi?id=515804

Vendor Advisory https://download.novell.com/Download?buildid=1z3z-OsVCiE~

Third Party Advisory https://www.zerodayinitiative.com/advisories/ZDI-09-067/

Permissions Required https://bugzilla.suse.com/show_bug.cgi?id=515804

Vendor Advisory https://download.novell.com/Download?buildid=1z3z-OsVCiE~

Third Party Advisory https://www.zerodayinitiative.com/advisories/ZDI-09-067/

/ 100

high-risk

Severity 32/34 · Critical

Exploitability 10/34 · Low

Exposure 14/34 · Moderate