Description
Heap-based buffer overflow in the Client Trust application (clntrust.exe) in Novell BorderManager 3.8 before Update 1.5 allows remote attackers to execute arbitrary code via a validation request in which the Novell tree name is not properly delimited with a wide-character backslash or NULL character.
References
- 1018882 vdb-entry
- ADV-2007-3682 vdb-entry
- http://download.novell.com/Download?buildid=AuOWp2Xsvmc~
- 26285 vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-07-064.html
- 27468 third-party-advisory