CVE-2007-5767 Heap-based buffer overflow in the Client Trust application (clntrust.exe) in Novell BorderManager 3.8 before Update 1.5 allows remote attackers to execute arbitrary code via a validation request in wh...
HighCVSS 10.0
EPSS 6.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the Client Trust application (clntrust.exe) in Novell BorderManager 3.8 before Update 1.5 allows remote attackers to execute arbitrary code via a validation request in which the Novell tree name is not properly delimited with a wide-character backslash or NULL character.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell bordermanager | <= 3.8 | No fix listed |
References
- download.novell.com patch
- 27468 patch third-party-advisory vendor-advisory
- 1018882 vdb-entry
- 26285 vdb-entry
- ADV-2007-3682 vdb-entry
- www.zerodayinitiative.com