Secunia

Ryan Smith and Alex Wheeler have reported a vulnerability in Novell Distributed Print Service (DPS), which potentially can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an integer overflow error within the variable-length array decoding code in the RPC-based protocol library. This can be exploited to cause a heap-based buffer overflow and may allow arbitrary code execution.

The vulnerability has been reported in the following products:
* Novell Distributed Print Services (NDPS).
* Novell Novell Open Enterprise Server (NetWare based)
* Novell Client versions 4.83 SP3, 4.90 SP2, and 4.91 SP2 for Windows 2000/XP/2003.

Solution
Update to the fixed versions.
Further details available in Customer Area

Provided and/or discovered by
Ryan Smith and Alex Wheeler.

Changelog
Further details available in Customer Area

Original Advisory
http://www.hustlelabs.com/novell_ndps_advisory.pdf

Novell:
http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=9145&sliceId=SAL_Public&dialogID=3455056&stateId=0%200%203453353
http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=1076&sliceId=SAL_Public&dialogID=3455056&stateId=0%200%203453353
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973719.htm
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973700.htm

Deep Links
Links available in Customer Area