Novell Client NDPPNT.DLL Unspecified Buffer Overflow Vulnerability

Bugtraq ID:	21479
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 07 2006 12:00AM
Updated:	Dec 07 2006 12:00AM
Credit:	The vendor disclosed this issue.
Vulnerable:	Novell Client 4.91 SP3 Novell Client 4.91 SP2 - Microsoft Windows 2000 Professional SP4 - Microsoft Windows 2000 Professional SP3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 SR2 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home SP1 - Microsoft Windows XP Home - Microsoft Windows XP Professional SP1 - Microsoft Windows XP Professional Novell Client 4.91 SP1 Novell Client 4.91 SP1 Novell Client 4.91
Not Vulnerable:

Novell Client NDPPNT.DLL Unspecified Buffer Overflow Vulnerability

Novell Client is prone to an unspecified buffer-overflow vulnerability because it fails to perform adequate bounds-checking on user-supplied data before copying it to an insufficiently sized buffer.

An attacker could exploit this issue to have arbitrary code execute in the context of the affected application. Failed attempts will likely cause denial-of-service conditions.

Novell Client NDPPNT.DLL Unspecified Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Novell Client NDPPNT.DLL Unspecified Buffer Overflow Vulnerability

Solution:
The vendor has released a fix that addresses this issue. Please see the references for more information.


Novell Client 4.91 SP1

• Novell 491psp3_ndppnt.exe
  http://support.novell.com/servlet/filedownload/uns/ftf/491psp3_ndppnt. exe

Novell Client 4.91

• Novell 491psp3_ndppnt.exe
  http://support.novell.com/servlet/filedownload/uns/ftf/491psp3_ndppnt. exe

Novell Client 4.91 SP3

• Novell 491psp3_ndppnt.exe
  http://support.novell.com/servlet/filedownload/uns/ftf/491psp3_ndppnt. exe

Novell Client 4.91 SP1

• Novell 491psp3_ndppnt.exe
  http://support.novell.com/servlet/filedownload/uns/ftf/491psp3_ndppnt. exe

Novell Client 4.91 SP2

• Novell 491psp3_ndppnt.exe
  http://support.novell.com/servlet/filedownload/uns/ftf/491psp3_ndppnt. exe

Novell Client NDPPNT.DLL Unspecified Buffer Overflow Vulnerability

References:

• Novell Client Product Homepage (Novell)
  
• Novell Client 4.91 Post-SP3 NDPPNT.DLL (Novell)