CVE-2006-5854

Multiple buffer overflows in the Spooler service (nwspool.dll) in Novell Netware Client 4.91 through 4.91 SP2 allow remote attackers to execute arbitrary code via a long argument to the (1) EnumPrinters and (2) OpenPrinter functions.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

57.53% chance of exploitation in the next 30 days, 99th percentile

Published

2006-12-03

Updated

2024-08-07

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/29146
• https://www.exploit-db.com/exploits/3220

Security advisories

• http://www.novell.com/support/search.do?cmd=displayKC&externalId=3125538&sliceId=SAL_Publ…
• http://www.zerodayinitiative.com/advisories/ZDI-06-043.html
• http://www.kb.cert.org/vuls/id/300636
• http://www.kb.cert.org/vuls/id/653076
• http://www.securityfocus.com/bid/21220

References

• CVE Record
• NVD entry