A vulnerability has been reported in Novell Client, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an error in NWSPOOL.DLL when handling the "EnumPrinters()" function and can be exploited to cause a stack-based buffer overflow via a specially crafted RPC request.

This is similar to:
SA26238

Successful exploitation allows execution of arbitrary code.

The vulnerability affects version 4.91 SP2, SP3, and SP4.

Solution
Novell has issued a Field Test File (491psp2_3_4_nwspool_2.zip):
Further details available in Customer Area

Provided and/or discovered by
Anonymous and Avosani Gabriele, reported via ZDI.

Changelog
Further details available in Customer Area

Original Advisory
Novell:
http://download.novell.com/Download?buildid=Ui5qNQgEmHE~

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-08-005.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area