PDA

Bekijk Volledige Versie : Novell NDPS Remote Vulnerability (Server & Client)



Ryan Smith
15/05/06, 21:20
Summary:
There's an integer overflow present that affects Novell Windows
clients and Novell Netware server and Novell Open Enterprise server.

Impact:
Remote, unauthenticated, super-user privileges.

Affected software:
Novell Netware (All versions)
Novell Open Enterprise Server (All NetWare based versions)
Novell Netware Client for Windows (All versions)

Credit:
Ryan Smith & Alex Wheeler

Details & Patch information:
http://www.hustlelabs.com/novell_ndps_advisory.pdf

Vendor links:
http://www.novell.com/support/search.do?cmd=3DdisplayKC&docType=3Dkc&extern=
alId=3D9145&sliceId=3DSAL_Public&dialogID=3D3455056&stateId=3D0%200%2034533=
53
http://www.novell.com/support/search.do?cmd=3DdisplayKC&docType=3Dkc&extern=
alId=3D1076&sliceId=3DSAL_Public&dialogID=3D3455056&stateId=3D0%200%2034533=
53

License:
This work is licensed under the Creative Commons Attribution 2.5
License. To view a copy of this license, visit
http://creativecommons.org/licenses/by/2.5/ or send a letter to
Creative Commons, 543 Howard Street, 5th Floor, San Francisco,
California, 94105, USA.

Attribution should be provided both in the form of a link or reference
to http://www.hustlelabs.com and a copy of the researchers' names
listed under the Credit section of this document.

All other trademarks and copyrights referenced in this document are
the property of their respective owners.