CVE-2006-5854

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 57.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-12-03 · updated 2026-06-16

Description

Multiple buffer overflows in the Spooler service (nwspool.dll) in Novell Netware Client 4.91 through 4.91 SP2 allow remote attackers to execute arbitrary code via a long argument to the (1) EnumPrinters and (2) OpenPrinter functions.

Affected products

Novell Netware Client: 4.91, 4.91-sp1, 4.91-sp2

References

http://secunia.com/advisories/23027
http://securitytracker.com/id?1017263
http://securitytracker.com/id?1017315
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974765.htm
http://www.kb.cert.org/vuls/id/300636
http://www.kb.cert.org/vuls/id/653076
http://www.novell.com/support/search.do?cmd=displayKC&externalId=3125538&sliceId=SAL_Public
http://www.securityfocus.com/archive/1/453012/100/0/threaded
http://www.securityfocus.com/bid/21220
http://www.securityfocus.com/data/vulnerabilities/exploits/testlpc.c
http://www.vupen.com/english/advisories/2006/4631
http://www.zerodayinitiative.com/advisories/ZDI-06-043.html

Get alerted when CVE-2006-5854 or the next vulnerability affects your stack