Login Request a demo
Unscored severity · published Feb 13, 2008
CVE-2008-0639
Stack-based buffer overflow in the EnumPrinters function in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2, SP3, and SP4 for Windows allows remote attackers to…
–
CVSS
23.2%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the EnumPrinters function in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2, SP3, and SP4 for Windows allows remote attackers to execute arbitrary code via a crafted RPC request, aka Novell bug 353138, a different vulnerability than CVE-2006-5854. NOTE: this issue exists because of an incomplete fix for CVE-2007-6701.
Exploitation
Is it being used?
Exploit prediction (EPSS)23.2% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
Client · Novell
4.91; 4.91; 4.91 · source: NVD
Affected product
CL
Client
Novell
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0639
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0639
Patch
http://download.novell.com/Download?buildid=SszG22IIugM~
Patch
http://marc.info/?l=full-disclosure&m=120276962211348&w=2
Patch
http://secunia.com/advisories/28895
support.novell.com
http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5008300.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/487980/100/0/threaded
Patch
http://www.securityfocus.com/bid/27741
More from Client
–
CVE-2013-3705
The VBA32 AntiRootKit component for Novell Client 2 SP3 before IR5 on Windows allows local users to cause a denial of service (bugcheck and BSOD) via an IOCTL call for an invalid…
–
CVE-2013-3956
The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2 on Windows Vista and Windows Server 2008; and Novell…
–
CVE-2013-3697
Integer overflow in the NWFS.SYS kernel driver 4.91.5.8 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003 and the NCPL.SYS kernel driver in Novell Client 2 SP2 on…
–
CVE-2008-2145
Stack-based buffer overflow in Novell Client 4.91 SP4 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long username…
–
CVE-2007-6701
Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP4 for Windows allow remote attackers to execute arbitrary code via long…