Novell Client 4.91 SP4 nwspool.dll buffer overflow

Added: 08/10/2007 CVE: CVE-2007-6701 BID: 25092 OSVDB: 37319 Background Novell Client software provides NetWare connectivity to Windows platforms. Problem The nwspool.dll library in Novell Client is affected by buffer overflow vulnerabilities in several different functions, allowing remote...

Novell Client 4.91 SP4 nwspool.dll buffer overflow

Added: 08/10/2007 CVE: CVE-2007-6701 BID: 25092 OSVDB: 37319 Background Novell Client software provides NetWare connectivity to Windows platforms. Problem The nwspool.dll library in Novell Client is affected by buffer overflow vulnerabilities in several different functions, allowing remote...

Novell Client 4.91 SP4 nwspool.dll buffer overflow

Added: 08/10/2007 CVE: CVE-2007-6701 BID: 25092 OSVDB: 37319 Background Novell Client software provides NetWare connectivity to Windows platforms. Problem The nwspool.dll library in Novell Client is affected by buffer overflow vulnerabilities in several different functions, allowing remote...

Novell Client 4.91 SP4 nwspool.dll buffer overflow

Added: 08/10/2007 CVE: CVE-2007-6701 BID: 25092 OSVDB: 37319 Background Novell Client software provides NetWare connectivity to Windows platforms. Problem The nwspool.dll library in Novell Client is affected by buffer overflow vulnerabilities in several different functions, allowing remote...

Novell客户端nwspool.dll远程栈缓冲区溢出漏洞

BUGTRAQ ID: 25092 Novell Client是允许NetWare连接到Windows的工作站软件。 Novell Client在处理spoolss命名管道上的RPC数据时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制客户端。 Novell客户端所安装的nwspool.dll库负责处理通过spoolss命名管道所发送的RPC请求。这个DLL库所暴露的一些RPC函数没有正确地验证参数大小便将用户提供的数据拷贝到了栈缓冲区，这可能触发缓冲区溢出，导致执行任意指令。 Novell Client 4.91 SP4 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载...

Novell Netware client for Windows buffer overflow

Buffer overflow in NWSPOOL.DLL RPC function...

ZDI-07-045: Novell Client NWSPOOL.DLL Stack Overflow Vulnerability

ZDI-07-045: Novell Client NWSPOOL.DLL Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-045.html August 6, 2007 -- CVE ID: Pending Assignment -- Affected Vendor: Novell -- Affected Products: Novell Netware Client -- TippingPointTM IPS Customer Protection: TippingPoin...

Novell Client NWSPOOL.DLL Stack Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of the Novell Netware Client. Authentication is not required to exploit this vulnerability. The specific flaw exists in nwspool.dll which is responsible for handling RPC requests through...

CVE-2007-4044

Rejected reason: The MS-RPC functionality in smbd in Samba 3 on SUSE Linux before 20070720 does not include "one character in the shell escape handling." NOTE: this issue was originally characterized as a shell metacharacter issue due to an incomplete fix for CVE-2007-2447, which was interpreted ...

Design/Logic Flaw

Rejected reason: The MS-RPC functionality in smbd in Samba 3 on SUSE Linux before 20070720 does not include "one character in the shell escape handling." NOTE: this issue was originally characterized as a shell metacharacter issue due to an incomplete fix for CVE-2007-2447, which was interpreted ...

CVE-2007-4044

CVE-2007-4044 entry is rejected/not used and does not represent an active vulnerability.

GLSA-200707-11 : MIT Kerberos 5: Arbitrary remote code execution

The remote host is affected by the vulnerability described in GLSA-200707-11 MIT Kerberos 5: Arbitrary remote code execution kadmind is affected by multiple vulnerabilities in the RPC library shipped with MIT Kerberos 5. It fails to properly handle zero-length RPC credentials CVE-2007-2442 and th...

lsa_transnames_heap-solaris.rb.txt

$Id: lsatransnamesheap.rb 5046 2007-07-12 00:41:00Z ramon $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Computer Associates Alert Notification Server buffer overflow

Added: 07/19/2007 CVE: CVE-2007-3825 BID: 24947 OSVDB: 36096 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...

[CAID 35515]: CA Products Alert Service RPC Procedure Buffer Overflow Vulnerabilities

Title: CAID 35515: CA Products Alert Service RPC Procedure Buffer Overflow Vulnerabilities CA Vuln ID CAID: 35515 CA Advisory Date: 2007-07-17 Reported By: Anonymous researcher working with the iDefense VCP Impact: Remote attacker can cause a denial of service or execute arbitrary code. Summary:...

Computer Associates Alert Notification Server buffer overflow

Added: 07/19/2007 CVE: CVE-2007-3825 BID: 24947 OSVDB: 36096 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...

CA eTrust Integrated Threat Management multiple buffer overflow

Buffer overflows in Alert Notification Server RPC interface...

Computer Associates Alert Notification Server buffer overflow

Added: 07/19/2007 CVE: CVE-2007-3825 BID: 24947 OSVDB: 36096 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...

Computer Associates Alert Notification Server buffer overflow

Added: 07/19/2007 CVE: CVE-2007-3825 BID: 24947 OSVDB: 36096 Background The Alert Notification Server is included with multiple Computer Associates products to provide notifications to console users. Problem The Alert Notification Server is affected by buffer overflow vulnerabilities in multiple...

CVE-2007-3825

Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA formerly Computer Associates Alert Notification Server, as used in Threat Manager for the Enterprise, Protection Suites, certain BrightStor ARCserve products, and BrightStor Enterprise Backup, allo...