Novell Client Username Information Disclosure and Denial Of Service Vulnerabilities

Bugtraq ID:	21385
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 01 2006 12:00AM
Updated:	Dec 13 2006 08:33PM
Credit:	Deral Heiland is credited with discovering this vulnerability.
Vulnerable:	Novell Client 4.91 SP3 Novell Client 4.91 SP2 - Microsoft Windows 2000 Professional SP4 - Microsoft Windows 2000 Professional SP3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 SR2 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home SP1 - Microsoft Windows XP Home - Microsoft Windows XP Professional SP1 - Microsoft Windows XP Professional
Not Vulnerable:

Novell Client Username Information Disclosure and Denial Of Service Vulnerabilities

Novell Client is prone to information-disclosure and denial-of-service vulnerabilities because the application fails to properly sanitize user-supplied input.

Successful exploits may allow remote attackers to retrieve sensitive information or to cause denial-of-service conditions. Other attacks may also be possible.

Novell Client 4.91 is vulnerable; other versions may also be affected.

Novell Client Username Information Disclosure and Denial Of Service Vulnerabilities

Attackers may exploit this issue by gaining access to the vulnerable application.

Novell Client Username Information Disclosure and Denial Of Service Vulnerabilities

Solution:
The vendor has released multiple patches to address this issue. Please see the references for more information.


Novell Client 4.91 SP3

• Novell 491psp3_loginw32.exe;
  http://support.novell.com/servlet/filedownload/sec/ftf/491psp3_loginw3 2.exe

Novell Client 4.91 SP2

• Novell 491psp2_login_5.exe
  http://support.novell.com/servlet/filedownload/sec/ftf/491psp2_login_5 .exe

Novell Client Username Information Disclosure and Denial Of Service Vulnerabilities

References:

• Novell Client post-4.91 SP2 LOGINW32.DLL - TID2974872 (Novell)
  
• Novell Client post-4.91 SP3 LOGINW32.DLL - TID2974876 (Novell)
  
• Novell Homepage (Novell)
  
• Layered Defense Advisory: Novell Client 4.91 Format String Vulnerability (Layered Defense)