This update resolves a newly-discovered, privately-reported vulnerability.
A remote code execution vulnerability exists in the Client Service for NetWare
(CSNW). By default, CSNW is not installed on any affected operating system
version. Only customers who manually installed CSNW could be vulnerable to
this issue. This service is also called Gateway Service for NetWare on Windows
2000 Server.

 

An attacker who successfully exploited this vulnerability could remotely take
complete control of an affected system. An attacker could then install
programs; view, change, or delete data; or create new accounts with full user
rights.