24 matches found
EUVD-2007-5732
Malware in sbrugna...
EUVD-2000-0787
Malware in sbrugna...
EUVD-2002-1733
Malware in sbrugna...
Immunity Canvas: NWSPOOL_C
Name| nwspoolc ---|--- CVE| CVE-2008-0639 Exploit Pack| CANVAS Description| Novell Netware Client for Windows Notes| CVE Name: CVE-2008-0639 VENDOR: Novell Notes: Use the setthreadtoken module to revert back to LocalSystem once the exploitation is successful Platforms Tested: References:...
Novell Client NWSPOOL.DLL EnumPrinters Stack Overflow Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of the Novell Netware Client. Authentication is not required to exploit this vulnerability. The specific flaw exists in nwspool.dll which is responsible for handling RPC requests through...
iDefense Security Advisory 01.09.08: Novell NetWare Client nicm.sys Local Privilege Escalation Vulnerability
iDefense Security Advisory 01.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 09, 2008 I. BACKGROUND The Novell Client software provides a workstation with access to Novell NetWare networks as well as Novell Open Enterprise Server OES services. Novell Clients can access the full...
CVE-2007-5762
NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \.\nicm device and providing crafted kernel addresses via IOCTLs with the METHODNEITHER buffering mode...
Code injection
NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \.\nicm device and providing crafted kernel addresses via IOCTLs with the METHODNEITHER buffering mode...
CVE-2007-5762
NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \.\nicm device and providing crafted kernel addresses via IOCTLs with the METHODNEITHER buffering mode...
CVE-2007-5762
CVE-2007-5762 affects the NICM.SYS driver (3.0.0.4) used by Novell NetWare Client 4.91 SP4. The vulnerability allows local users to escalate privileges to kernel mode by opening the .icm device and sending crafted IOCTLs with METHOD_NEITHER, passing kernel addresses as arguments. The issue arises...
CVE-2007-5762: Improper Input Validation
NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \.\nicm device and providing crafted kernel addresses via IOCTLs with the METHODNEITHER buffering mode...
Novell Client NWSPOOL.DLL Stack Overflow Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of the Novell Netware Client. Authentication is not required to exploit this vulnerability. The specific flaw exists in nwspool.dll which is responsible for handling RPC requests through...
Novell NetWare Client for Windows EnumPrinters() function vulnerable to buffer overflow
Overview A vulnerability exists in the Novell NetWare client that could allow a remote attacker to execute arbitrary code on an affected system. Description NetWare is a network operating system produced and maintained by Novell. Novell provides NetWare clients for Microsoft Windows and Linux...
CVE-2006-5854
CVE-2006-5854 affects Novell NetWare Client 4.91 through 4.91 SP2. The vulnerability is a buffer overflow in the Spooler service (nwspool.dll) that can be triggered by a long argument to EnumPrinters and OpenPrinter, allowing remote code execution. The initial description specifies arbitrary code...
CVE-2006-5854: Undefined Security Weakness
Multiple buffer overflows in the Spooler service nwspool.dll in Novell Netware Client 4.91 through 4.91 SP2 allow remote attackers to execute arbitrary code via a long argument to the 1 EnumPrinters and 2 OpenPrinter functions...
[Full-disclosure] Novell NDPS Remote Vulnerability (Server & Client)
Summary: There's an integer overflow present that affects Novell Windows clients and Novell Netware server and Novell Open Enterprise server. Impact: Remote, unauthenticated, super-user privileges. Affected software: Novell Netware All versions Novell Open Enterprise Server All NetWare based...
CVE-2002-2083: Undefined Security Weakness
The Novell Netware client running on Windows 95 allows local users to bypass the login and open arbitrary files via the "What is this?" help feature, which can be launched from the Novell Netware login screen...
CVE-2002-1754: Undefined Security Weakness
Buffer overflow in Novell NetWare Client 4.80 through 4.83 allows local users to cause a denial of service crash by using ping, traceroute, or a similar utility to force the client to resolve a large hostname...
CVE-2002-1754
Buffer overflow in Novell NetWare Client 4.80 through 4.83 allows local users to cause a denial of service crash by using ping, traceroute, or a similar utility to force the client to resolve a large hostname...