CVE Feed

    Dashboard / CVE / CVE-2007-2954

    CVE-2007-2954

    Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2 through SP4 for Windows allow remote attackers to execute arbitrary code via certain long arguments to the (1) RpcAddPrinterDriver, (2) RpcGetPrinterDriverDirectory, and other unspecified RPC requests, aka Novell bug 300870, a different vulnerability than CVE-2006-5854.

    Published:Aug 31, 2007
    Last Modified:Apr 23, 2026
    EPS:Aug 31, 2007
    EPSS Score:0.23484
    CVSS Score:10

    Affected Products

    Vendor
    Novell
    Product
    Client

    Exploits

    No exploit reference

    Related CVEs

    CVE-2013-3705 (CVSS 4.9) — The VBA32 AntiRootKit component for Novell Client 2 SP3 before IR5 on Windows allows local users to cause a de…
    CVE-2013-3956 (CVSS 7.2) — The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Cl…
    CVE-2013-3697 (CVSS 7.2) — Integer overflow in the NWFS.SYS kernel driver 4.91.5.8 in Novell Client 4.91 SP5 on Windows XP and Windows Se…
    CVE-2008-2145 (CVSS 7.2) — Stack-based buffer overflow in Novell Client 4.91 SP4 and earlier allows local users to cause a denial of serv…
    CVE-2008-0639 (CVSS 10) — Stack-based buffer overflow in the EnumPrinters function in the Spooler service (nwspool.dll) in Novell Client…
    CVE-2007-6701 (CVSS 10) — Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP4 for Windo…
    CVE-2007-5667 (CVSS 7.2) — NWFILTER.SYS in Novell Client 4.91 SP 1 through SP 4 for Windows 2000, XP, and Server 2003 makes the \.\nwfilt…
    CVE-2007-3207 (CVSS 7.1) — Buffer overflow in the NFS mount daemon (XNFS.NLM) in Novell NetWare 6.5 SP6, and probably earlier, allows rem…
    CVE-2007-0108 (CVSS 6) — nwgina.dll in Novell Client 4.91 SP3 for Windows 2000/XP/2003 does not delete user profiles during a Terminal …
    CVE-2006-6443 (CVSS 10) — Buffer overflow in the Novell Distributed Print Services (NDPS) Print Provider for Windows component (NDPPNT.D…

    References

    http://download.novell.com/Download?buildid=VOXNZb-6t_g~
    http://osvdb.org/37321
    http://secunia.com/advisories/26374
    http://secunia.com/secunia_research/2007-57/advisory/
    http://securitytracker.com/id?1018623
    http://www.securityfocus.com/bid/25474
    http://www.vupen.com/english/advisories/2007/3006
    http://www.zerodayinitiative.com/advisories/ZDI-07-045/
    https://exchange.xforce.ibmcloud.com/vulnerabilities/35824
    http://download.novell.com/Download?buildid=VOXNZb-6t_g~
    http://osvdb.org/37321
    http://secunia.com/advisories/26374
    http://secunia.com/secunia_research/2007-57/advisory/
    http://securitytracker.com/id?1018623
    http://www.securityfocus.com/bid/25474
    http://www.vupen.com/english/advisories/2007/3006
    http://www.zerodayinitiative.com/advisories/ZDI-07-045/
    https://exchange.xforce.ibmcloud.com/vulnerabilities/35824

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High