Secunia

A vulnerability has been reported in Novell BorderManager, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to the Client Trust application incorrectly processing validation requests sent to the UDP port on which clntrust.exe is listening (by default 3024). This can be exploited to cause a heap-based buffer overflow by sending a specially crafted validation request containing a Novell tree name without backslash or zero wide characters.

Successful exploitation allows execution of arbitrary code.

The vulnerability is reported in Novell BorderManager 3.8. Prior versions may also be affected.

Solution
Apply vendor patch.
Further details available in Customer Area

Provided and/or discovered by
Discovered by uvinc, reported via ZDI.

Original Advisory
ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-07-064.html

Novell:
http://download.novell.com/Download?buildid=AuOWp2Xsvmc~

Deep Links
Links available in Customer Area