openSUSE Novell Client 'novfs' Local Buffer Overflow Vulnerability

Bugtraq ID:	43071
Class:	Boundary Condition Error
CVE:	CVE-2010-3110
Remote:	No
Local:	Yes
Published:	Sep 08 2010 12:00AM
Updated:	Sep 08 2010 12:00AM
Credit:	SUSE
Vulnerable:	S.u.S.E. openSUSE 11.3
Not Vulnerable:

openSUSE Novell Client 'novfs' Local Buffer Overflow Vulnerability

openSUSE is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Local attackers can exploit this issue to run arbitrary code with elevated privileges. Failed exploit attempts can crash the affected kernel, denying service to legitimate users.

NOTE: The affected module is only loaded when the Novell Client stack is configured.

openSUSE 11.3 is vulnerable; other versions may be affected.

openSUSE Novell Client 'novfs' Local Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

openSUSE Novell Client 'novfs' Local Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.

openSUSE Novell Client 'novfs' Local Buffer Overflow Vulnerability

References:

• openSUSE Homepage (SUSE)