TUCoPS :: Networks :: tb13234.htm

TUCoPS :: Networks :: tb13234.htm
Novell Client Trust Heap Overflow Vulnerability
ZDI-07-064: Novell Client Trust Heap Overflow Vulnerability ZDI-07-064: Novell Client Trust Heap Overflow Vulnerability

WkRJLTA3LTA2NDogTm92ZWxsIENsaWVudCBUcnVzdCBIZWFwIE92ZXJmbG93IFZ1bG5lcmFiaWxp
dHkNCmh0dHA6Ly93d3cuemVyb2RheWluaXRpYXRpdmUuY29tL2Fkdmlzb3JpZXMvWkRJLTA3LTA2
NC5odG1sDQpPY3RvYmVyIDI1LCAyMDA3DQoNCi0tIENWRSBJRDoNCkNWRS0yMDA3LTU3NjcNCg0K
LS0gQWZmZWN0ZWQgVmVuZG9yOg0KTm92ZWxsDQoNCi0tIEFmZmVjdGVkIFByb2R1Y3RzOg0KQm9y
ZGVyTWFuYWdlciAzLjgNCg0KLS0gVnVsbmVyYWJpbGl0eSBEZXRhaWxzOg0KVGhpcyB2dWxuZXJh
YmlsaXR5IGFsbG93cyByZW1vdGUgYXR0YWNrZXJzIHRvIGV4ZWN1dGUgYXJiaXRyYXJ5IGNvZGUg
b24NCnZ1bG5lcmFibGUgaW5zdGFsbGF0aW9ucyBvZiBOb3ZlbGwgc29mdHdhcmUgd2hpY2ggdXRp
bGl6ZSB0aGUgTm92ZWxsDQpDbGllbnQgVHJ1c3QuIEF1dGhlbnRpY2F0aW9uIGlzIG5vdCByZXF1
aXJlZCB0byBleHBsb2l0IHRoaXMNCnZ1bG5lcmFiaWxpdHkuDQoNClRoZSBzcGVjaWZpYyBmbGF3
IGV4aXN0cyBpbiB0aGUgTm92ZWxsIENsaWVudCBUcnVzdCBhcHBsaWNhdGlvbiwNCmNsbnRydXN0
LmV4ZSwgd2hpY2ggbGlzdGVucyBieSBkZWZhdWx0IG9uIFVEUCBwb3J0IDMwMjQgb24gTm92ZWxs
DQpjbGllbnQgbWFjaGluZXMuIER1cmluZyBhIHZhbGlkYXRpb24gcmVxdWVzdCwgdGhlIENsaWVu
dCBUcnVzdCBwcm9jZXNzDQpjb3BpZXMgYSB1c2VyLXN1cHBsaWVkIE5vdmVsbCB0cmVlIG5hbWUg
dW50aWwgYSB3aWRlLWNoYXJhY3Rlcg0KYmFja3NsYXNoIG9yIGEgTlVMTCBpcyBlbmNvdW50ZXJl
ZC4gSWYgbmVpdGhlciBpcyBmb3VuZCB3aXRoaW4gdGhlDQpkYXRhLCB0aGUgcHJvY2VzcyB3aWxs
IGNvcHkgZXhjZXNzIGRhdGEgd2hpY2ggbGF0ZXIgb3ZlcmZsb3dzIGEgc3RhdGljDQpidWZmZXIg
ZHVyaW5nIGEgY2FsbCB0byB3c3ByaW50ZkEuDQoNCg0KLS0gVmVuZG9yIFJlc3BvbnNlOg0KTm92
ZWxsIGhhcyBpc3N1ZWQgYW4gdXBkYXRlIHRvIGNvcnJlY3QgdGhpcyB2dWxuZXJhYmlsaXR5LiBN
b3JlIGRldGFpbHMNCmNhbiBiZSBmb3VuZCBhdDoNCg0KICAgaHR0cDovL2Rvd25sb2FkLm5vdmVs
bC5jb20vRG93bmxvYWQ/YnVpbGRpZD1BdU9XcDJYc3ZtY34NCg0KLS0gRGlzY2xvc3VyZSBUaW1l
bGluZToNCjIwMDcuMDcuMTcgLSBWdWxuZXJhYmlsaXR5IHJlcG9ydGVkIHRvIHZlbmRvcg0KMjAw
Ny4xMC4yNSAtIENvb3JkaW5hdGVkIHB1YmxpYyByZWxlYXNlIG9mIGFkdmlzb3J5DQoNCi0tIENy
ZWRpdDoNClRoaXMgdnVsbmVyYWJpbGl0eSB3YXMgZGlzY292ZXJlZCBieSB1dmluYy4NCg0KLS0g
QWJvdXQgdGhlIFplcm8gRGF5IEluaXRpYXRpdmUgKFpESSk6DQpFc3RhYmxpc2hlZCBieSBUaXBw
aW5nUG9pbnQsIGEgZGl2aXNpb24gb2YgM0NvbSwgVGhlIFplcm8gRGF5IEluaXRpYXRpdmUNCiha
REkpIHJlcHJlc2VudHMgYSBiZXN0LW9mLWJyZWVkIG1vZGVsIGZvciByZXdhcmRpbmcgc2VjdXJp
dHkNCnJlc2VhcmNoZXJzIGZvciByZXNwb25zaWJseSBkaXNjbG9zaW5nIGRpc2NvdmVyZWQgdnVs
bmVyYWJpbGl0aWVzLg0KDQpSZXNlYXJjaGVycyBpbnRlcmVzdGVkIGluIGdldHRpbmcgcGFpZCBm
b3IgdGhlaXIgc2VjdXJpdHkgcmVzZWFyY2gNCnRocm91Z2ggdGhlIFpESSBjYW4gZmluZCBtb3Jl
IGluZm9ybWF0aW9uIGFuZCBzaWduLXVwIGF0Og0KDQogICAgaHR0cDovL3d3dy56ZXJvZGF5aW5p
dGlhdGl2ZS5jb20NCg0KVGhlIFpESSBpcyB1bmlxdWUgaW4gaG93IHRoZSBhY3F1aXJlZCB2dWxu
ZXJhYmlsaXR5IGluZm9ybWF0aW9uIGlzIHVzZWQuDQozQ29tIGRvZXMgbm90IHJlLXNlbGwgdGhl
IHZ1bG5lcmFiaWxpdHkgZGV0YWlscyBvciBhbnkgZXhwbG9pdCBjb2RlLg0KSW5zdGVhZCwgdXBv
biBub3RpZnlpbmcgdGhlIGFmZmVjdGVkIHByb2R1Y3QgdmVuZG9yLCAzQ29tIHByb3ZpZGVzIGl0
cw0KY3VzdG9tZXJzIHdpdGggemVybyBkYXkgcHJvdGVjdGlvbiB0aHJvdWdoIGl0cyBpbnRydXNp
b24gcHJldmVudGlvbg0KdGVjaG5vbG9neS4gRXhwbGljaXQgZGV0YWlscyByZWdhcmRpbmcgdGhl
IHNwZWNpZmljcyBvZiB0aGUNCnZ1bG5lcmFiaWxpdHkgYXJlIG5vdCBleHBvc2VkIHRvIGFueSBw
YXJ0aWVzIHVudGlsIGFuIG9mZmljaWFsIHZlbmRvcg0KcGF0Y2ggaXMgcHVibGljbHkgYXZhaWxh
YmxlLiBGdXJ0aGVybW9yZSwgd2l0aCB0aGUgYWx0cnVpc3RpYyBhaW0gb2YNCmhlbHBpbmcgdG8g
c2VjdXJlIGEgYnJvYWRlciB1c2VyIGJhc2UsIDNDb20gcHJvdmlkZXMgdGhpcyB2dWxuZXJhYmls
aXR5DQppbmZvcm1hdGlvbiBjb25maWRlbnRpYWxseSB0byBzZWN1cml0eSB2ZW5kb3JzIChpbmNs
dWRpbmcgY29tcGV0aXRvcnMpDQp3aG8gaGF2ZSBhIHZ1bG5lcmFiaWxpdHkgcHJvdGVjdGlvbiBv
ciBtaXRpZ2F0aW9uIHByb2R1Y3QuDQoNCkNPTkZJREVOVElBTElUWSBOT1RJQ0U6IFRoaXMgZS1t
YWlsIG1lc3NhZ2UsIGluY2x1ZGluZyBhbnkgYXR0YWNobWVudHMsDQppcyBiZWluZyBzZW50IGJ5
IDNDb20gZm9yIHRoZSBzb2xlIHVzZSBvZiB0aGUgaW50ZW5kZWQgcmVjaXBpZW50KHMpIGFuZA0K
bWF5IGNvbnRhaW4gY29uZmlkZW50aWFsLCBwcm9wcmlldGFyeSBhbmQvb3IgcHJpdmlsZWdlZCBp
bmZvcm1hdGlvbi4NCkFueSB1bmF1dGhvcml6ZWQgcmV2aWV3LCB1c2UsIGRpc2Nsb3N1cmUgYW5k
L29yIGRpc3RyaWJ1dGlvbiBieSBhbnkgDQpyZWNpcGllbnQgaXMgcHJvaGliaXRlZC4gIElmIHlv
dSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZQ0KZGVsZXRlIGFuZC9vciBk
ZXN0cm95IGFsbCBjb3BpZXMgb2YgdGhpcyBtZXNzYWdlIHJlZ2FyZGxlc3Mgb2YgZm9ybSBhbmQN
CmFueSBpbmNsdWRlZCBhdHRhY2htZW50cyBhbmQgbm90aWZ5IDNDb20gaW1tZWRpYXRlbHkgYnkg
Y29udGFjdGluZyB0aGUNCnNlbmRlciB2aWEgcmVwbHkgZS1tYWlsIG9yIGZvcndhcmRpbmcgdG8g
M0NvbSBhdCBwb3N0bWFzdGVyQDNjb20uY29tLiANCg=