Novell Client software provides NetWare connectivity to Windows platforms.
A vulnerability in the
**xtagent.exe** program allows remote, authenticated attackers to execute arbitrary commands by sending a specially crafted RPC message to the XTIERRPCPIPE named pipe which dereferences an arbitrary pointer.
Apply the Novell NetIdentity 1.2.4 patch.
Exploit works on Novell NetIdentity Agent 1.2.3 and requires a valid Windows login and password.
The Crypt::DES, Digest::MD4, and Digest::MD5 packages are required for performing Windows authentication. These packages are available from <http://cpan.org/modules/by-module/>.