CVE-2008-0639

CVE-2008-0639: A stack-based buffer overflow in the EnumPrinters function of the Spooler service (nwspool.dll) affects Novell Client 4.91 SP2, SP3, and SP4 for Windows. The vulnerability arises from processing RPC requests without proper boundary checks, allowing a remote attacker to execute arbi...

CVE-2013-3956

CVE-2013-3956 affects the NICM.SYS kernel driver (version 3.1.11.0) used by Novell Client 4.91 SP5 on Windows XP/2003, Novell Client 2 SP2 on Vista/2008, and Novell Client 2 SP3 on Windows Server 2008 R2/Win7/Win8/Server 2012. The vulnerability permits local privilege escalation via a crafted IOC...

CVE-2007-2954

CVE-2007-2954 describes a stack-based buffer overflow in the Spooler service (nwspool.dll) of the Novell Client for Windows (Novell Client 4.91 SP2 through SP4). The vulnerability arises in the Spooler when processing certain long arguments to RPC requests (notably RpcAddPrinterDriver, RpcGetPrin...

CVE-2007-3207

The CVE-2007-3207 issue affects Novell NetWare 6.5 with the NFS mount daemon XNFS.NLM. A buffer overflow in the NFS mount path handling (long path in a mount request) can allow a remote attacker to trigger a denial-of-service (abend). Documented impact indicates a remote, unauthenticated attacker...

CVE-2006-6443

CVE-2006-6443 affects the NDPS Print Provider for Windows component NDPPNT.DLL in Novell Client 4.91. The vulnerability is described as a buffer overflow in ndppnt.dll with remote attack vectors and high impact (confidentiality, integrity, and availability). The CVSS details indicate network acce...

CVE-2013-3697

CVE-2013-3697 describes an integer overflow in NWFS.SYS (Novell Client 4.91 SP5) on Windows XP/2003 and NCPL.SYS (Novell Client 2 SP2 on Vista/2008 and SP3 on Windows 7/8/2008 R2/2012) that may let local users gain privileges via a crafted 0x1439EB IOCTL call. The impact is local privilege escala...

CVE-2006-2612

The CVE-2006-2612 entry affects Novell Client for Windows (versions 4.8 and 4.9) . The vulnerability arises because the client does not restrict access to the clipboard contents while the system is locked, enabling someone with physical access to read the current clipboard by pasting it into the ...

CVE-2007-5667

CVE-2007-5667 affects the Novell NetWare Client for Windows, where the nwfilter.sys driver is loaded at startup and exposes the local-device .wfilter via METHOD_NEITHER IOCTLs. The vulnerability allows an unprivileged local user to pass kernel addresses as arguments and overwrite kernel memory, e...

CVE-2007-6701

CVE-2007-6701 covers multiple stack-based buffer overflows in the Spooler service (nwspool.dll) of Novell Client 4.91 SP4 for Windows, enabling remote code execution via long RPC arguments. The incident is described across multiple sources as a separate issue from CVE-2007-2954, with the vulnerab...

CVE-2006-6307

The CVE-2006-6307 issue affects the srvloc.sys driver in Novell Client for Windows prior to version 4.91 SP3. A crafted packet to port 427 can cause denial of service by triggering access to pageable or invalid addresses at an unnecessarily high IRQL, yielding partial availability impact as per t...

CVE-2007-0108

The CVE-2007-0108 issue affects nwgina.dll in Novell Client 4.91 SP3 for Windows (2000/XP/2003). It does not delete user profiles during Terminal Service or Citrix sessions, enabling a remote authenticated user to invoke alternate user profiles. The description does not specify additional technic...

CVE-2013-3705

CVE-2013-3705 affects Novell Client 2 SP3 on Windows, specifically the VBA32 AntiRootKit component. The issue is a local DoS via an invalid IOCTL call to the IOCTL handling, potentially causing a bugcheck/BSOD. The vulnerability is described as affecting SP3 prior to IR5; Nessus/Vulnerability fee...

CVE-2006-6306

The CVE-2006-6306 entry documents a local format-string vulnerability in NMAS within the Novell Client 4.91 SP2/SP3. The flaw affects the Username field of the logon window, allowing users with physical access to read stack and memory contents via format specifiers. The connected documents do not...

CVE-2006-2304

CVE-2006-2304 affects Novell Client for Windows DPRPCW32.DLL in versions 4.83 SP3, 4.90 SP2 and 4.91 SP2. The vulnerability is described as multiple integer overflows in the DPRPC library that occur when processing an XDR-encoded array with a very large element count, triggering overflows in ndps...

CVE-2000-0793

CVE-2000-0793 affects Norton AntiVirus 5.00.01C when used with the Novell Netware client, where the auto-protection service fails to restart after the first user logs off. The CVSS2 base metrics indicate a HIGH impact across confidentiality, integrity, and availability with network access and no ...

CVE-2008-2145

CVE-2008-2145 describes a stack-based buffer overflow in the Novell Client 4.91 SP4 and earlier. The vulnerability allows local users to trigger a denial of service (crash) and potentially execute arbitrary code by submitting a long username in the the "forgotten password" dialog. This entry is b...