Description
Stack-based buffer overflow in the EnumPrinters function in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2, SP3, and SP4 for Windows allows remote attackers to execute arbitrary code via a crafted RPC request, aka Novell bug 353138, a different vulnerability than CVE-2006-5854. NOTE: this issue exists because of an incomplete fix for CVE-2007-6701.
References
- 20080211 ZDI-08-005: Novell Client NWSPOOL.DLL EnumPrinters Stack Overflow Vulnerability mailing-list
- 28895 third-party-advisory
- ADV-2008-0496 vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-08-005.html
- 20080211 ZDI-08-005: Novell Client NWSPOOL.DLL EnumPrinters Stack Overflow Vulnerability mailing-list
- 1019366 vdb-entry
- 27741 vdb-entry
- http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5008300.html
- http://download.novell.com/Download?buildid=SszG22IIugM~