CVE-2007-5767: Buffer Overflow
Published Nov 2, 2007
·Updated
Heap-based buffer overflow in the Client Trust application (clntrust.exe) in Novell BorderManager 3.8 before Update 1.5 allows remote attackers to execute arbitrary code via a validation request in which the Novell tree name is not properly delimited with a wide-character backslash or NULL character.
Affected Software
1 affected component
Novell BorderManager<=3.8
Remediation
Patch Available
Patch Available
Event History
Nov 2, 2007
CVE Published
11:46 PM
Nov 3, 2007
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-5767?
CVE-2007-5767 is classified as critical due to its potential for remote code execution.
2
How do I fix CVE-2007-5767?
To mitigate CVE-2007-5767, update Novell BorderManager to version 3.8 Update 1.5 or later.
3
What systems are affected by CVE-2007-5767?
CVE-2007-5767 affects Novell BorderManager 3.8 prior to Update 1.5.
4
What kind of attack does CVE-2007-5767 enable?
CVE-2007-5767 allows remote attackers to execute arbitrary code through a heap-based buffer overflow.
5
Is there a workaround for CVE-2007-5767?
There are no documented workarounds for CVE-2007-5767; upgrading is the recommended approach.