Novell Client Unspecified Buffer Overflow Vulnerability

Bugtraq ID:	17931
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	May 10 2006 12:00AM
Updated:	May 15 2006 04:49PM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	Novell Client 4.91 SP2 - Microsoft Windows 2000 Professional SP4 - Microsoft Windows 2000 Professional SP3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 SR2 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home SP1 - Microsoft Windows XP Home - Microsoft Windows XP Professional SP1 - Microsoft Windows XP Professional Novell Client 4.90 SP2 - Microsoft Windows 2000 Professional SP4 - Microsoft Windows 2000 Professional SP3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 SR2 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home SP1 - Microsoft Windows XP Home - Microsoft Windows XP Professional SP1 - Microsoft Windows XP Professional Novell Client 4.83 SP3 - Microsoft Windows 2000 Professional SP4 - Microsoft Windows 2000 Professional SP3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 SR2 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home SP1 - Microsoft Windows XP Home - Microsoft Windows XP Professional SP1 - Microsoft Windows XP Professional
Not Vulnerable:

Novell Client Unspecified Buffer Overflow Vulnerability

Novell Client is prone to an unspecified buffer-overflow vulnerability. Successful exploits may result in a denial of service or arbitrary code execution.

This issue exists in Novell Client 4.83 SP3, 4.90 SP2, and 4.91 SP2; other versions may also be vulnerable.

Details regarding the precise nature of this vulnerability are not currently available. This record will be updated when more information is available.

Novell Client Unspecified Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Novell Client Unspecified Buffer Overflow Vulnerability

Solution:
Novell has released a beta fix to address this issue. See the referenced vendor advisory for further information.


Novell Client 4.90 SP2

• Novell 491psp2_dprpcw32.exe
  for Windows 2000/XP/2003
  http://support.novell.com/servlet/filedownload/sec/ftf/491psp2_dprpcw3 2.exe

Novell Client 4.91 SP2

• Novell 491psp2_dprpcw32.exe
  for Windows 2000/XP/2003
  http://support.novell.com/servlet/filedownload/sec/ftf/491psp2_dprpcw3 2.exe

Novell Client 4.83 SP3

• Novell 491psp2_dprpcw32.exe
  for Windows 2000/XP/2003
  http://support.novell.com/servlet/filedownload/sec/ftf/491psp2_dprpcw3 2.exe

Novell Client Unspecified Buffer Overflow Vulnerability

References:

• Novell Client Product Homepage (Novell)
  
• TID2973719 - Novell Client 4.91 Post-SP2 DPRPCW32.DLL (Novell)