Intrusion PreventionNovell.Client.Print.Provider.Buffer.Overflow
Description
This indicates an attempt to exploit a Buffer Overflow vulnerability in a print provider installed by Novell Netware Client.
The vulnerability is caused by the "nwspool.dll" library's failure to properly handle overly long arguments to the "EnumPrinters()" and "OpenPrinter()" functions. A remote attacker can exploit this to execute arbitrary code.
Affected Products
Novell Netware Client 4.91
Novell Netware Client 4.91 SP1
Novell Netware Client 4.91 SP2
Impact
System compromise: Arbitrary code execution.
Recommended Actions
Apply the update issued by the vendor:
http://www.novell.com/support/search.do?cmd=displayKC&externalId=3125538&sliceId=SAL_Public
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 29139 |
| Created | Sep 16, 2011 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2006-5854 |
| Exploit Prediction Score | 92.84% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Novell |