Back to CVE Browser

CVE-2007-5767

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1840%

EPSS Percentile27.39th

PublishedNov 2, 2007

Last ModifiedApr 23, 2026

Vulnerability Description

Heap-based buffer overflow in the Client Trust application (clntrust.exe) in Novell BorderManager 3.8 before Update 1.5 allows remote attackers to execute arbitrary code via a validation request in which the Novell tree name is not properly delimited with a wide-character backslash or NULL character.

Affected Platforms (CPE)

📦

Novell

Bordermanager

<= 3.8

References & Advisories

🔗 http://download.novell.com/Download?buildid=AuOWp2Xsvmc~

🔗 http://secunia.com/advisories/27468

🔗 http://securitytracker.com/id?1018882

🔗 http://www.securityfocus.com/bid/26285

🔗 http://www.vupen.com/english/advisories/2007/3682

🔗 http://www.zerodayinitiative.com/advisories/ZDI-07-064.html

🔗 http://download.novell.com/Download?buildid=AuOWp2Xsvmc~

🔗 http://secunia.com/advisories/27468

Related Vulnerabilities

CVE-2006-71557.5

Novell BorderManager 3.8 SP4 generates the same ISAKMP cookies for the same source IP and port number during the same day, which a...

CVE-2000-06517.5

The ClientTrust program in Novell BorderManager does not properly verify the origin of authentication requests, which could allow ...

CVE-2006-36977.2

Agnitum Outpost Firewall Pro 3.51.759.6511 (462), as used in (1) Lavasoft Personal Firewall 1.0.543.5722 (433) and (2) Novell Bord...

CVE-2001-04865.0

Remote attackers can cause a denial of service in Novell BorderManager 3.6 and earlier by sending TCP SYN flood to port 353.