CVE-2006-5854: Buffer Overflow
Multiple buffer overflows in the Spooler service (nwspool.dll) in Novell Netware Client 4.91 through 4.91 SP2 allow remote attackers to execute arbitrary code via a long argument to the (1) EnumPrinters and (2) OpenPrinter functions.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-5854?
CVE-2006-5854 is classified as a critical vulnerability due to potential remote code execution allowing attackers to exploit buffer overflows.
How do I fix CVE-2006-5854?
To mitigate CVE-2006-5854, update your Novell Netware Client to version 4.91 SP3 or later, which addresses these buffer overflow vulnerabilities.
What are the affected versions for CVE-2006-5854?
The affected versions for CVE-2006-5854 include Novell Netware Client 4.91, 4.91 SP1, and 4.91 SP2.
What functions are vulnerable in CVE-2006-5854?
The vulnerable functions in CVE-2006-5854 are EnumPrinters and OpenPrinter, which can be exploited through overly long arguments.
Can CVE-2006-5854 lead to data loss?
Yes, CVE-2006-5854 can lead to data loss as it allows remote attackers to execute arbitrary code, potentially compromising system integrity.