Novell Client for Windows Forgotten Password Local Privilege Escalation Vulnerability

Bugtraq ID:	29109
Class:	Boundary Condition Error
CVE:	CVE-2007-5762
Remote:	No
Local:	Yes
Published:	May 08 2008 12:00AM
Updated:	May 09 2008 01:15AM
Credit:	Laurent Gaffié
Vulnerable:	Novell Client 4.91 SP4 Novell Client 4.91 SP3
Not Vulnerable:

Novell Client for Windows Forgotten Password Local Privilege Escalation Vulnerability

Novell Client for Windows is prone to a local privilege-escalation vulnerability because it fails to adequately bounds-check user-supplied input.

An attacker can exploit this issue to execute arbitrary code with elevated privileges. Successfully exploiting this issue may result in the complete compromise of affected computers.

Novell Client for Windows 4.91 SP4 is vulnerable; other versions may also be affected.

Novell Client for Windows Forgotten Password Local Privilege Escalation Vulnerability

This issue can be demonstrated by entering a username of 254 characters and selecting the 'Forgotten Password' option. This may trigger a computer crash.

Novell Client for Windows Forgotten Password Local Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Novell Client for Windows Forgotten Password Local Privilege Escalation Vulnerability

References:

• Novell Homepage (Novell)
  
• Novell Client <= 4.91 SP4 Local Stack overflow / B.S.O.D (unauthentificated user ([email protected])