CVE-2008-0639

Stack-based buffer overflow in the EnumPrinters function in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2, SP3, and SP4 for Windows allows remote attackers to execute arbitrary code via a crafted RPC request, aka Novell bug 353138, a different vulnerability than CVE-2006-5854. NOTE: this issue exists because of an incomplete fix for CVE-2007-6701.

• CWE-119

• http://download.novell.com/Download?buildid=SszG22IIugM~Patch
• http://marc.info/?l=full-disclosure&m=120276962211348&w=2Patch
• http://secunia.com/advisories/28895Patch, Vendor Advisory
• http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5008300.html
• http://www.securityfocus.com/archive/1/487980/100/0/threaded
• http://www.securityfocus.com/bid/27741Patch
• http://www.securitytracker.com/id?1019366
• http://www.vupen.com/english/advisories/2008/0496
• http://www.zerodayinitiative.com/advisories/ZDI-08-005.htmlPatch
• http://download.novell.com/Download?buildid=SszG22IIugM~Patch
• http://marc.info/?l=full-disclosure&m=120276962211348&w=2Patch
• http://secunia.com/advisories/28895Patch, Vendor Advisory
• http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5008300.html
• http://www.securityfocus.com/archive/1/487980/100/0/threaded
• http://www.securityfocus.com/bid/27741Patch
• http://www.securitytracker.com/id?1019366
• http://www.vupen.com/english/advisories/2008/0496
• http://www.zerodayinitiative.com/advisories/ZDI-08-005.htmlPatch

Published

Feb 13, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-0632Unrestricted file upload vulnerability in cp_upload_image.ph…
• CVE-2008-0633Buffer overflow in Anon Proxy Server 0.102 and earlier, when…
• CVE-2008-0634Buffer overflow in the NamoInstaller.NamoInstall.1 ActiveX c…
• CVE-2008-0635Unspecified vulnerability in the delivery engine in Openads …
• CVE-2008-0636Level Platforms, Inc. (LPI) Managed Workplace Service Center…
• CVE-2008-0638Heap-based buffer overflow in the Veritas Enterprise Adminis…
• CVE-2008-0640Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0,…
• CVE-2008-0642Cross-site scripting (XSS) vulnerability in files created by…6.1
• CVE-2008-0643Cross-site scripting (XSS) vulnerability in Adobe ColdFusion…
• CVE-2008-0644Adobe ColdFusion MX 7 and ColdFusion 8 allows remote attacke…
• CVE-2008-0645Multiple PHP remote file inclusion vulnerabilities in Portai…
• CVE-2008-0646The bdecode_recursive function in include/libtorrent/bencode…