CVE-2008-0639

Published Feb 13, 2008

Last updated 6 years ago

Overview

Description: Stack-based buffer overflow in the EnumPrinters function in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2, SP3, and SP4 for Windows allows remote attackers to execute arbitrary code via a crafted RPC request, aka Novell bug 353138, a different vulnerability than CVE-2006-5854. NOTE: this issue exists because of an incomplete fix for CVE-2007-6701.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 10
Impact score: 10
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: CWE-119

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:novell:client:4.91:sp2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "78A17422-1FFE-4942-A6F1-01F99E4D42F9"
          },
          {
            "criteria": "cpe:2.3:a:novell:client:4.91:sp3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F0CBDEB2-98CF-4C6A-A45A-F5B61803E449"
          },
          {
            "criteria": "cpe:2.3:a:novell:client:4.91:sp4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EDDFB0E9-EF4C-4E9E-9369-453AF2A8481F"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References