SkipNavigation
Home | FAQ | Contact | Privacy Policy
US-CERT
American Flag
  Vulnerability
Notes
Database

Search Vulnerability Notes

Vulnerability Notes Help Information


 
 View Notes By
  Name

ID Number

CVE Name

Date Public

Date Published

Date Updated

Severity Metric
 Other Documents
  Technical Alerts

Technical Bulletins

Alerts

Security Tips
 

Vulnerability Note VU#653076

Novell NetWare Client for Windows EnumPrinters() function vulnerable to buffer overflow

Overview

A vulnerability exists in the Novell NetWare client that could allow a remote attacker to execute arbitrary code on an affected system.

I. Description

NetWare is a network operating system produced and maintained by Novell. Novell provides NetWare clients for Microsoft Windows and Linux operating systems.

From the Novell Client for Windows XP/2000 product overview:

    It enables you to access NetWareŽ services from Windows XP or 2000 workstations or servers and tightly integrates either product into your NetWare network. For example, with Novell Client for Windows XP/2000, you can browse through authorized NetWare directories, transfer files, print documents and use advanced NetWare services directly from a Windows XP or 2000 workstation.
The nwspool.dll library is included with the Novell Client for Windows, and provides access to remote printing services.

There is a buffer overflow vulnerability in the EnumPrinters() function which is used in the nwspool.dll library. An attacker may be able to trigger the overflow by sending specially-crafted Remote Procedure Call (RPC) requests to the Spooler service on a vulnerable system.

II. Impact

A remote unauthenticated attacker may be able to execute arbitrary code on a vulnerable system.

III. Solution

Upgrade

Novell has issued a beta upgrade that addresses this issue. See Novell Technical Information Document TID2974765 for more details.

Systems Affected

VendorStatusDate NotifiedDate Updated
Novell, Inc.Vulnerable19-Dec-2006

References


http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974765.htm
http://secunia.com/advisories/23027/
https://secure-support.novell.com/KanisaPlatform/Publishing/583/3125538_f.SAL_Public.html
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974765.htm

Credit

The Zero Day Initiative disclosed this vulnerability.

This document was written by Ryan Giobbi.

Other Information

Date Public:2006-11-21
Date First Published:2006-12-19
Date Last Updated:2006-12-19
CERT Advisory: 
CVE-ID(s):CVE-2006-6114
NVD-ID(s):CVE-2006-6114
US-CERT Technical Alerts: 
Metric:6.63
Document Revision:28

If you have feedback, comments, or additional information about this vulnerability, please send us email.
 

 
Page Corner Image
Produced 2006 by US-CERT, a government organization
Disclaimers and copyright information
Get Adobe Reader Get Adobe Reader