Login Request a demo
Unscored severity · published Nov 2, 2007
CVE-2007-5767
Heap-based buffer overflow in the Client Trust application (clntrust.exe) in Novell BorderManager 3.8 before Update 1.5 allows remote attackers to execute arbitrary code via a…
–
CVSS
6.8%
EPSS
No
On KEV
Description
Heap-based buffer overflow in the Client Trust application (clntrust.exe) in Novell BorderManager 3.8 before Update 1.5 allows remote attackers to execute arbitrary code via a validation request in which the Novell tree name is not properly delimited with a wide-character backslash or NULL character.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.8% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BO
Bordermanager · Novell
through 3.8 · source: NVD
Affected product
BO
Bordermanager
Novell
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5767
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5767
Patch
http://download.novell.com/Download?buildid=AuOWp2Xsvmc~
Patch
http://secunia.com/advisories/27468
securitytracker.com
http://securitytracker.com/id?1018882
www.securityfocus.com
http://www.securityfocus.com/bid/26285
www.vupen.com
http://www.vupen.com/english/advisories/2007/3682
www.zerodayinitiative.com
http://www.zerodayinitiative.com/advisories/ZDI-07-064.html
More from Bordermanager
–
CVE-2006-7155
Novell BorderManager 3.8 SP4 generates the same ISAKMP cookies for the same source IP and port number during the same day, which allows remote attackers to conduct denial of…
–
CVE-2006-5286
Unspecified vulnerability in IKE.NLM in Novell BorderManager 3.8 allows attackers to cause a denial of service (crash) via unknown attack vectors related to "VPN issues" for…
–
CVE-2006-1218
Unspecified vulnerability in the HTTP proxy in Novell BorderManager 3.8 and earlier allows remote attackers to cause a denial of service (CPU consumption and ABEND) via unknown…
–
CVE-2004-1457
The Virtual Private Network (VPN) capability in Novell Bordermanager 3.8 allows remote attackers to cause a denial of service (ABEND in IKE.NLM) via a malformed IKE packet, as…
–
CVE-2002-0781
RTSP proxy for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a GET request to port 9090 followed by a series of carriage returns, which…