CVE-2006-6675

CVE-2006-6675 describes an XSS vulnerability in Novell NetWare 6.5 Support Pack 5 and 6, and Novell Apache on NetWare 2.0.48. The issue allows remote attackers to inject arbitrary web script or HTML through unspecified parameters in the Welcome web-app. Public references list affected products an...

CVE-2006-6675: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Novell NetWare 6.5 Support Pack 5 and 6 and Novell Apache on NetWare 2.0.48 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in Welcome web-app...

[SA23406] Novell NetWare Welcome web-app Cross-Site Scripting Vulnerability

TITLE: Novell NetWare Welcome web-app Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA23406 VERIFY ADVISORY: http://secunia.com/advisories/23406/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote OPERATING SYSTEM: Novell NetWare 6.x http://secunia.com/product/78/...

Novell NetWare Client for Windows EnumPrinters() function vulnerable to buffer overflow

Overview A vulnerability exists in the Novell NetWare client that could allow a remote attacker to execute arbitrary code on an affected system. Description NetWare is a network operating system produced and maintained by Novell. Novell provides NetWare clients for Microsoft Windows and Linux...

Symantec Backup Exec多个堆溢出漏洞

Symantec Backup Exec Remote Agent是一款备份解决方案。 Netware Servers版本下的Symantec Backup Exec不正确验证和过滤用户输入，远程攻击者可以利用漏洞进行堆破坏攻击，可导致拒绝服务或执行任意指令。 Backup Exec 9.1 and 9.2 for Netware Servers Remote Agent for Windows Servers存在这些漏洞，根据报告Backup Exec for Windows Servers, Backup Exec Continuous Protection Server CPS...

Immunity Canvas: NWSPOOL_A

Name| nwspoola ---|--- CVE| CVE-2006-5854 Exploit Pack| CANVAS Description| Novell Netware Client for Windows Notes| CVE Name: CVE-2006-5854 VENDOR: Novell Notes: Platforms Tested: References: http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974765.htm CVE Url:...

CVE-2006-5854

Multiple buffer overflows in the Spooler service nwspool.dll in Novell Netware Client 4.91 through 4.91 SP2 allow remote attackers to execute arbitrary code via a long argument to the 1 EnumPrinters and 2 OpenPrinter functions...

CVE-2006-5854

Multiple buffer overflows in the Spooler service nwspool.dll in Novell Netware Client 4.91 through 4.91 SP2 allow remote attackers to execute arbitrary code via a long argument to the 1 EnumPrinters and 2 OpenPrinter functions...

CVE-2006-5854

CVE-2006-5854 affects Novell NetWare Client 4.91 through 4.91 SP2. The vulnerability is a buffer overflow in the Spooler service (nwspool.dll) that can be triggered by a long argument to EnumPrinters and OpenPrinter, allowing remote code execution. The initial description specifies arbitrary code...

CVE-2006-5854: Undefined Security Weakness

Multiple buffer overflows in the Spooler service nwspool.dll in Novell Netware Client 4.91 through 4.91 SP2 allow remote attackers to execute arbitrary code via a long argument to the 1 EnumPrinters and 2 OpenPrinter functions...

Novell Netware Client multiple security vulnerabilities

Buffer overflow in EnumPrinters and OpenPrinter functions. Format string vulnerability in Novell Modular Authentication Services...

Novell Netware Client Print Provider Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of the Novell Netware Client. Authentication is not required to exploit this vulnerability. The specific flaw exists in a print provider installed by the Netware Client. The nwspool.dll...

Microsoft Netware Client Service Memory Corruption (MS06-066; CVE-2006-4688)

Client Services for NetWare CSNW provides a Windows workstation with access to NetWare file, print, and directory services. This gives users the ability to store and retrieve documents from NetWare file servers, print to NetWare print queues, and log on to Novell Directory Services NDS. By...

Microsoft Windows NetWare客户端服务内存破坏漏洞（MS06-066）

Microsoft Windows是微软发布的非常流行的操作系统。 Windows NetWare客户端服务CSNW中存在多个漏洞，远程攻击者可能利用此漏洞使服务失去响应或执行任意指令。 攻击者可以向运行NetWare客户端服务的受影响系统发送特制的网络消息，导致执行任意代码或系统停止响应。 Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP1 Microsoft Windows Server 2003 Microsoft Windows 2000SP4 临时解决方法： 删除NetWare客户端服务。...

Microsoft Client Service for NetWare tree name buffer overflow

Added: 11/16/2006 CVE: CVE-2006-4688 BID: 20984 OSVDB: 30260 Background The Client Service for NetWare, also known as the Gateway Service for NetWare, allows Windows users to access NetWare file, print, and directory services. It is available with Microsoft Windows operating systems but is not...

Microsoft Client Service for NetWare tree name buffer overflow

Added: 11/16/2006 CVE: CVE-2006-4688 BID: 20984 OSVDB: 30260 Background The Client Service for NetWare, also known as the Gateway Service for NetWare, allows Windows users to access NetWare file, print, and directory services. It is available with Microsoft Windows operating systems but is not...

Microsoft Client Service for NetWare tree name buffer overflow

Added: 11/16/2006 CVE: CVE-2006-4688 BID: 20984 OSVDB: 30260 Background The Client Service for NetWare, also known as the Gateway Service for NetWare, allows Windows users to access NetWare file, print, and directory services. It is available with Microsoft Windows operating systems but is not...

Microsoft Windows Client Service for Netware multiple vulnerabilities

Memory corruption, DoS...

[Full-disclosure] Vulnerabilities in Client Service for NetWare

McAfee, Inc. McAfeer Avertr Labs Security Advisory Public Release Date: 2006-11-16 Vulnerabilities in Client Service for NetWare CVE-2006-4688, CVE-2006-4689 Synopsis The Client Service for NetWare CSNW allows a Windows client to access NetWare file, print, and directory services. Successful...

Microsoft Client Service for NetWare tree name buffer overflow

Added: 11/16/2006 CVE: CVE-2006-4688 BID: 20984 OSVDB: 30260 Background The Client Service for NetWare, also known as the Gateway Service for NetWare, allows Windows users to access NetWare file, print, and directory services. It is available with Microsoft Windows operating systems but is not...