Novell Netware Client vulnerabilities

3 CVEs affecting Novell Netware Client, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-5762, published 2008-01-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-5854, published 2006-12-03. High severity, CVSS 7.5. EPSS: 57.5% chance of exploitation in the next 30 days. Multiple buffer overflows in the Spooler service (nwspool.dll) in Novell Netware Client 4.91 through 4.91 SP2 allow remote attackers to execute arbitrary code via a long argument to the (1)…
CVE-2007-5762, published 2008-01-09. High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days. NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \\.\nicm device and providing crafted kernel addresses via IOCTLs with…
CVE-2002-1754, published 2002-12-31. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. Buffer overflow in Novell NetWare Client 4.80 through 4.83 allows local users to cause a denial of service (crash) by using ping, traceroute, or a similar utility to force the client to resolve a…