Novell NetWare Distributed Print Services Integer Overflow Vulnerability

Bugtraq ID:	17922
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	May 09 2006 12:00AM
Updated:	May 16 2006 10:54PM
Credit:	Ryan Smith & Alex Wheeler discovered this issue.
Vulnerable:	Novell Open Enterprise Server (OES) 0 Novell Netware 6.5 SP5 Novell Netware 6.5 SP4 Novell Netware 6.5 SP1.1(b) Novell Netware 6.5 SP1.1(a) Novell Netware 6.5 SP3 Novell Netware 6.5 SP2 Novell Netware 6.5 SP1 Novell Netware 6.5 Novell Client 4.91 SP2 - Microsoft Windows 2000 Professional SP4 - Microsoft Windows 2000 Professional SP3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 SR2 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home SP1 - Microsoft Windows XP Home - Microsoft Windows XP Professional SP1 - Microsoft Windows XP Professional Novell Client 4.91 SP1 Novell Client 4.91 Novell Client 4.90 SP2 - Microsoft Windows 2000 Professional SP4 - Microsoft Windows 2000 Professional SP3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 SR2 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home SP1 - Microsoft Windows XP Home - Microsoft Windows XP Professional SP1 - Microsoft Windows XP Professional Novell Client 4.83 SP3 - Microsoft Windows 2000 Professional SP4 - Microsoft Windows 2000 Professional SP3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 SR2 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home SP1 - Microsoft Windows XP Home - Microsoft Windows XP Professional SP1 - Microsoft Windows XP Professional
Not Vulnerable:

Novell NetWare Distributed Print Services Integer Overflow Vulnerability

Novell NetWare Distributed Print Services is prone to an integer-overflow vulnerability.

An attacker could exploit this vulnerability to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will likely cause denial-of-service conditions. Since the vulnerable application executes with administrative privileges, this may facilitate the complete remote compromise of affected computers.

Novell NetWare Distributed Print Services Integer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Novell NetWare Distributed Print Services Integer Overflow Vulnerability

Solution:
Fixes are available; please see the referenced vendor advisories for further information.


Novell Client 4.91 SP2

• Novell 491psp2_dprpcw32.exe
  http://support.novell.com/servlet/filedownload/sec/ftf/491psp2_dprpcw3 2.exe

Novell Netware 6.5 SP3

• Novell dprpc_security.exe
  http://support.novell.com/servlet/filedownload/pub/dprpc_security.exe

Novell Netware 6.5 SP5

• Novell dprpc_security.exe
  http://support.novell.com/servlet/filedownload/pub/dprpc_security.exe

Novell Netware 6.5 SP4

• Novell dprpc_security.exe
  http://support.novell.com/servlet/filedownload/pub/dprpc_security.exe

Novell NetWare Distributed Print Services Integer Overflow Vulnerability

References:

• NDPS client remote integer overflow vulnerability (Novell)
  
• NDPS on NetWare remote integer overflow vulnerability (Novell)
  
• TID2973700 - Security release for DPRPCNLM (Novell)
  
• TID2973719 - ovell Client 4.91 Post-SP2 DPRPCW32.DLL (Novell)
  
• Novell NDPS Remote Vulnerability (Server & Client) ("Ryan Smith" )