Signature Detail

APP: Novell Distributed Print Services Integer Overflow

This signature detects attempts to exploit a known vulnerability in the Novell Distributed Print Services. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.

Extended Description

Novell NetWare Distributed Print Services is prone to an integer-overflow vulnerability. An attacker could exploit this vulnerability to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will likely cause denial-of-service conditions. Since the vulnerable application executes with administrative privileges, this may facilitate the complete remote compromise of affected computers.

Affected Products

• Novell Client 4.83 SP3
• Novell Client 4.90 SP2
• Novell Client 4.91
• Novell Client 4.91 SP1
• Novell Client 4.91 SP2
• Novell Netware 6.5.0
• Novell Netware 6.5.0 SP1
• Novell Netware 6.5.0 SP1.1(A)
• Novell Netware 6.5.0 SP1.1(B)
• Novell Netware 6.5.0 SP2
• Novell Netware 6.5.0 SP3
• Novell Netware 6.5.0 SP4
• Novell Netware 6.5.0 SP5
• Novell Open Enterprise Server (OES)

References

• BugTraq: 17922
• BugTraq: 17922
• CVE: CVE-2006-2327