Some vulnerabilities have been reported in Novell Client, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerabilities exist due to boundary errors within the Spooler service in the functions "OpenPrinter()" and "EnumPrinters()" in NWSPOOL.DLL. These can be exploited to cause buffer overflows via overly large arguments (458 or more characters as the first argument to "OpenPrinter()" or 524 or more characters, followed by an exclamation point, as the second argument to "EnumPrinters()") in RPC requests and may allow execution of arbitrary code.

The vulnerabilities are reported in version 4.91 SP2. Other versions may also be affected.

Solution
Apply patch.
Further details available to Secunia VIM customers

Provided and/or discovered by
Discovered by an anonymous person and reported by Tipping Point and the Zero Day Initiative.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Novell:
https://secure-support.novell.com/KanisaPlatform/Publishing/583/3125538_f.SAL_Public.html
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974765.htm

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-06-043.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers