What’s Vulnerable › Vulnerabilities

CVE-2009-5153

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-11-21 · updated 2026-06-16
• Weakness: CWE-119

Description

In Novell NetWare before 6.5 SP8, a stack buffer overflow in processing of CALLIT RPC calls in the NFS Portmapper daemon in PKERNEL.NLM allowed remote unauthenticated attackers to execute code, because a length field was incorrectly trusted.

Affected products

• Microfocus Netware: through 6.5; 6.5-sp1, 6.5-sp2, 6.5-sp3, 6.5-sp4, 6.5-sp5, 6.5-sp6 (+1)

References

• https://bugzilla.suse.com/show_bug.cgi?id=515804
• https://download.novell.com/Download?buildid=1z3z-OsVCiE~
• https://www.zerodayinitiative.com/advisories/ZDI-09-067/
• https://bugzilla.suse.com/show_bug.cgi?id=515804
• https://download.novell.com/Download?buildid=1z3z-OsVCiE~
• https://www.zerodayinitiative.com/advisories/ZDI-09-067/

Get alerted when CVE-2009-5153 or the next vulnerability affects your stack