CVE-2009-1639

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-05-15 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in Nucleus Data Recovery Kernel Recovery for Novell 4.03 allows user-assisted attackers to execute arbitrary code via a crafted .NKNT file.

Affected products

Nucleustechnologies Kernel Recovery: 4.03-novell

References

http://secunia.com/advisories/34798
http://www.insight-tech.org/index.php?p=Kernel-recovery-for-Novell-Traditional-volumes-v-4-03-Code-Execution-and-DoS
http://www.insight-tech.org/xploits/KernelrecoveryforNovell%28Traditionalvolumes%29v.4.03CodeExecutionandDoS.py
http://www.securityfocus.com/bid/34846
http://secunia.com/advisories/34798
http://www.insight-tech.org/index.php?p=Kernel-recovery-for-Novell-Traditional-volumes-v-4-03-Code-Execution-and-DoS
http://www.insight-tech.org/xploits/KernelrecoveryforNovell%28Traditionalvolumes%29v.4.03CodeExecutionandDoS.py
http://www.securityfocus.com/bid/34846

Get alerted when CVE-2009-1639 or the next vulnerability affects your stack