CVE-2010-2351

CVE-2010-2351 describes a critical stack-based buffer overflow vulnerability in the CIFS.NLM driver of Netware SMB 1.0, affecting Novell Netware 6.5 SP8 and earlier versions. This flaw allows unauthenticated remote attackers to execute arbitrary code by sending a crafted Sessions Setup AndX packet with an excessively long AccountName. With a CVSS score of 10.0, it represents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog or currently observed in active exploitation, a Proof-of-Concept exploit is publicly available on ExploitDB, indicating the potential for future attacks. Despite its age, the high FAUCET Risk Score of 97/100 underscores its continued severity, although it has received minimal community discussion or media coverage.