CVE-2010-4227: Novell Netware

High severity, CVSS 10.0. EPSS: 16.8% chance of exploitation in the next 30 days.

The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of service (abend) or execute arbitrary code via a crafted, signed value in a NFS RPC request to port UDP 1234, leading to a stack-based buffer overflow.

Affected products

• Novell Netware: up to and including 6.5; version 6.5 only

Published 2011-02-25. Last modified 2026-06-16.