PT-2006-6527 · Novell · Novell Netware Client
CVE-2006-5854
·
Publicado
2006-12-03
·
Atualizado
2018-10-17
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Novell Netware Client versions 4.91 through 4.91 SP2
Description
The issue is related to multiple buffer overflows in the Spooler service, specifically in the nwspool.dll component. This allows remote attackers to execute arbitrary code by providing a long argument to the
EnumPrinters and OpenPrinter functions.Recommendations
For Novell Netware Client versions 4.91 through 4.91 SP2, consider disabling the Spooler service or restricting access to the
EnumPrinters and OpenPrinter functions as a temporary workaround until a patch is available.Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Novell Netware Client