Novell Client 'vba32 antirootkit' Component Denial of Service Vulnerability

Release date:
Updated on:

Affected Systems:
Novell Client 2 SP3
Description:
--------------------------------------------------------------------------------
Bugtraq id: 64484
CVE (CAN) ID: CVE-2013-3705

The Novell Client workstation software extends the functionality of Linux and Windows desktops by providing access to NetWare and Open Enterprise Server (OES.

The VBA32 AntiRootKit component of Novell Client for Windows 2 SP3 has a local denial-of-service vulnerability. A local user can exploit this vulnerability to cause system crash and denial-of-service by calling invalid IOCTL.

<* Source: Dmitry Varshavsky
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Novell
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://support.novell.com/security-alerts
Http://www.novell.com/support/kb/doc.php? Id = 7014276
Http://download.novell.com/Download? Buildid = gCT45TxxTHQ ~