CVE-2007-5767

Description

Heap-based buffer overflow in the Client Trust application (clntrust.exe) in Novell BorderManager 3.8 before Update 1.5 allows remote attackers to execute arbitrary code via a validation request in which the Novell tree name is not properly delimited with a wide-character backslash or NULL character.

Affected products

• Novell / bordermanager3.8

References

• MISChttp://securitytracker.com/id?1018882
• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2007/3682
• MISChttp://download.novell.com/Download?buildid=AuOWp2Xsvmc~
• MISChttp://www.securityfocus.com/bid/26285
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-07-064.html
• VENDOR_ADVISORYhttp://secunia.com/advisories/27468