CVE-2009-5153: Micro Focus Netware

Critical severity, CVSS 9.8. EPSS: 6.1% chance of exploitation in the next 30 days.

In Novell NetWare before 6.5 SP8, a stack buffer overflow in processing of CALLIT RPC calls in the NFS Portmapper daemon in PKERNEL.NLM allowed remote unauthenticated attackers to execute code, because a length field was incorrectly trusted.

Affected products

• Micro Focus Netware: up to and including 6.5; version 6.5 only

Published 2018-11-21. Last modified 2026-06-16.