Unscored severity · published Feb 13, 2008
CVE-2007-6701
Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP4 for Windows allow remote attackers to execute arbitrary code via long…
–
CVSS
7.2%
EPSS
No
On KEV
Description
Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP4 for Windows allow remote attackers to execute arbitrary code via long arguments to multiple unspecified RPC functions, aka Novell bug 287919, a different vulnerability than CVE-2007-2954.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.2% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
Client · Novell
4.91 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6701
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6701
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2007-08/0082.html
Patch
http://secunia.com/advisories/26238
securitytracker.com
http://securitytracker.com/id?1018471
support.novell.com
http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5005400.html
Exploit
http://www.securityfocus.com/bid/25092
Patch
http://www.zerodayinitiative.com/advisories/ZDI-07-045.html
More from Client
–
CVE-2013-3705
The VBA32 AntiRootKit component for Novell Client 2 SP3 before IR5 on Windows allows local users to cause a denial of service (bugcheck and BSOD) via an IOCTL call for an invalid…
–
CVE-2013-3956
The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2 on Windows Vista and Windows Server 2008; and Novell…
–
CVE-2013-3697
Integer overflow in the NWFS.SYS kernel driver 4.91.5.8 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003 and the NCPL.SYS kernel driver in Novell Client 2 SP2 on…
–
CVE-2008-2145
Stack-based buffer overflow in Novell Client 4.91 SP4 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long username…
–
CVE-2008-0639
Stack-based buffer overflow in the EnumPrinters function in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2, SP3, and SP4 for Windows allows remote attackers to…