Although VM ships with several Microsoft products, the primary one is Internet Explorer. Currently a patch is only available for the 3000 series build. Microsoft recommends customers using a 2000 series to upgrade. A patch for the 2000 series may be available shortly. The vulnerability may allow an attacker to gain root privilege on the NFS server.
Caldera recommends upgrading to the latest version.
The problem has been corrected in the 2.2.12 kernel. This is similar to the problem reported in Section 8C of this digest. All versions up to COL 2.3 are vulnerable and there is no workaround. Patched versions are available on the Calder FTP site. The problems have been corrected in version 3.5-2.