Multiple buffer overflows in the Spooler service (nwspool.dll) in Novell...

Vulnerability Description

Multiple buffer overflows in the Spooler service (nwspool.dll) in Novell Netware Client 4.91 through 4.91 SP2 allow remote attackers to execute arbitrary code via a long argument to the (1) EnumPrinters and (2) OpenPrinter functions.

References

• http://www.kb.cert.org/vuls/id/300636
• http://www.securityfocus.com/data/vulnerabilities/exploits/testlpc.c
• http://www.novell.com/support/search.do?cmd=displayKC&externalId=3125538&sliceId=SAL_Public
• http://securitytracker.com/id?1017263
• http://www.securityfocus.com/bid/21220
• http://www.vupen.com/english/advisories/2006/4631
• http://www.securityfocus.com/archive/1/453012/100/0/threaded
• http://securitytracker.com/id?1017315
• http://www.zerodayinitiative.com/advisories/ZDI-06-043.html
• http://www.kb.cert.org/vuls/id/653076
• http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974765.htm
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30461
• http://secunia.com/advisories/23027