CVE-2006-5854
Novell Netware Client 4.91-4.91 SP2 - Remote Code Execution via Spooler Service Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2006-5854. PoCs published by Andres Tarasco, Andres Tarasco Acuna.
AI-analyzed exploit summary This exploit targets a vulnerability in the Windows spooler service (CVE-2006-5854) by leveraging insecure EnumPrintersW() calls to achieve local privilege escalation (LPE) to SYSTEM. It uses a shared memory section and a bind shell payload to gain control.
Description
Multiple buffer overflows in the Spooler service (nwspool.dll) in Novell Netware Client 4.91 through 4.91 SP2 allow remote attackers to execute arbitrary code via a long argument to the (1) EnumPrinters and (2) OpenPrinter functions.
Exploits (2)
This exploit targets a vulnerability in the Windows spooler service (CVE-2006-5854) by leveraging insecure EnumPrintersW() calls to achieve local privilege escalation (LPE) to SYSTEM. It uses a shared memory section and a bind shell payload to gain control.
This exploit targets a buffer overflow vulnerability in Novell Client (CVE-2006-5854) via insecure EnumPrintersW() calls in the spooler service. It leverages shared memory manipulation to achieve arbitrary code execution, specifically a bind shell on port 51477 with SYSTEM privileges.