Novell Client vulnerabilities

16 CVEs affecting Novell Client, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-3705, published 2013-12-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-0639, published 2008-02-13. High severity, CVSS 10.0. EPSS: 23.2% chance of exploitation in the next 30 days. Stack-based buffer overflow in the EnumPrinters function in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2, SP3, and SP4 for Windows allows remote attackers to execute arbitrary code via…
CVE-2007-2954, published 2007-08-31. High severity, CVSS 10.0. EPSS: 23.2% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2 through SP4 for Windows allow remote attackers to execute arbitrary code via certain long…
CVE-2006-2304, published 2006-05-11. High severity, CVSS 10.0. EPSS: 8.2% chance of exploitation in the next 30 days. Multiple integer overflows in the DPRPC library (DPRPCW32.DLL) in Novell Client 4.83 SP3, 4.90 SP2 and 4.91 SP2 allow remote attackers to execute arbitrary code via an XDR encoded array with a field…
CVE-2013-3956, published 2013-07-31. High severity, CVSS 7.2. EPSS: 7.8% chance of exploitation in the next 30 days. The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2 on Windows Vista and Windows Server 2008; and Novell Client 2 SP3 on Windows…
CVE-2007-6701, published 2008-02-13. High severity, CVSS 10.0. EPSS: 7.2% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP4 for Windows allow remote attackers to execute arbitrary code via long arguments to multiple…
CVE-2006-6443, published 2006-12-10. High severity, CVSS 10.0. EPSS: 2.4% chance of exploitation in the next 30 days. Buffer overflow in the Novell Distributed Print Services (NDPS) Print Provider for Windows component (NDPPNT.DLL) in Novell Client 4.91 has unknown impact and remote attack vectors.
CVE-2007-3207, published 2007-06-18. High severity, CVSS 7.1. EPSS: 2.2% chance of exploitation in the next 30 days. Buffer overflow in the NFS mount daemon (XNFS.NLM) in Novell NetWare 6.5 SP6, and probably earlier, allows remote attackers to cause a denial of service (abend) via a long path in a mount request.
CVE-2000-0793, published 2000-10-20. High severity, CVSS 10.0. EPSS: 2% chance of exploitation in the next 30 days. Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the auto-protection service after the first user has logged off of the system.
CVE-2006-6307, published 2006-12-05. Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days. srvloc.sys in Novell Client for Windows before 4.91 SP3 allows remote attackers to cause an unspecified denial of service via a crafted packet to port 427 that triggers an access of pageable or…
CVE-2007-0108, published 2007-01-09. Medium severity, CVSS 6.0. EPSS: 1.2% chance of exploitation in the next 30 days. nwgina.dll in Novell Client 4.91 SP3 for Windows 2000/XP/2003 does not delete user profiles during a Terminal Service or Citrix session, which allows remote authenticated users to invoke alternate…

Latest

CVE-2013-3705, published 2013-12-22. Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days. The VBA32 AntiRootKit component for Novell Client 2 SP3 before IR5 on Windows allows local users to cause a denial of service (bugcheck and BSOD) via an IOCTL call for an invalid IOCTL.
CVE-2013-3697, published 2013-07-31. High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days. Integer overflow in the NWFS.SYS kernel driver 4.91.5.8 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003 and the NCPL.SYS kernel driver in Novell Client 2 SP2 on Windows Vista and…
CVE-2008-2145, published 2008-05-12. High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days. Stack-based buffer overflow in Novell Client 4.91 SP4 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long username in the "forgotten…
CVE-2007-5667, published 2007-11-14. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. NWFILTER.SYS in Novell Client 4.91 SP 1 through SP 4 for Windows 2000, XP, and Server 2003 makes the \.\nwfilter device available for arbitrary user-mode input via METHOD_NEITHER IOCTLs, which allows…