Novell

This is Your Open EnterpriseTM

Novell Client 4.91 Post-SP2/3/4 NWSPOOL.DLL 1

This document (5007240) is provided subject to the disclaimer at the end of this document.

patches this patch supersedes

FileProductStatusPatch
491psp2_3_4_nwspool.zipNovell Client 4.91 SP2 for Windows 2000/XP/2003ObsoleteNovell Client 4.91 Post-SP2/3/4 NWSPOOL.DLL
491psp2_3_4_nwspool.zipNovell Client 4.91 SP4 for Windows XP/2003ObsoleteNovell Client 4.91 Post-SP2/3/4 NWSPOOL.DLL
491psp2_3_4_nwspool.zipNovell Client 4.91 SP3 for Windows XP/2003ObsoleteNovell Client 4.91 Post-SP2/3/4 NWSPOOL.DLL

patches that supersede this patch

ProductStatusNext Superceded ByLast Superceded By
Novell Client 4.91 SP4 for Windows XP/2003ObsoleteNovell Client 4.91 Post-SP2/3/4 NWSPOOL.DLL 2Novell Client 4.91 Post-SP2/3/4 NWSPOOL.DLL 2

patch attributes

Security patch: Yes
Priority: Mandatory
Distribution Type: Public

document

Revision: 10
Document ID: 5007240
Creation Date: 2007-11-30 16:38:42
Modified Date: 2008-05-14 17:38:01

abstract

491psp2_3_4_nwspool_1.zip is a patch file for the Novell Client 4.91 SP2, SP3, and SP4 for Windows 2000/XP/2003. It includes fixes for the NWSPOOL.DLL and NDPPNT.DLL modules, including a security vulnerability.

details

System Requirements:
This patch is designed to update the Novell Client 4.91 SP2, SP3, and SP4 for Windows 2000/XP/2003. It can be applies to any of these versions of the Client.

Installation:
1. Expand 491psp2_3_4_nwspool_1..zip (this file) to a temporary folder.
2. Open the folder.
3. (Recommended, but optional) Rename the existing NWSPOOL.DLL and NDPPNT.DLL in the \system32 folder to .OLD (or some other name). DO NOT REBOOT BEFORE PROCEEDING!
4. Install the files by doing ONE of the following while logged on as an Administrators member:
a) Right-Click on _491psp2_3_4_nwspool_1.inf and then click on INSTALL.
b) Run the _491psp2_3_4_nwspool_1.bat file.
c) Manually copy and replace the existing NWSPOOL.DLL and NDPPNT.DLL in the directories listed in Step 3, above.
5. You will be prompted to reboot. This reboot is required to complete the installation.

Overlaying the 4.91 SP2, SP3, or SP4 installation set
The files in this package can also be overlaid on top of a Novell Client 4.91 SP2, SP3, or SP4 installation set so that when SETUPNW.EXE is run to install the Novell client you will be installing the core client and the updates contained in this package in one operation.

To update the installation set with the file in this patch set, extract this package to a temporary location, then copy the resultant directory structure to over the top of the i386 folder in your Novell Client installation.

Technical Support Information:
This version of NWSPOOL.DLL and NDPPNT.DLL fixes the following issues seen with the 4.91 SP2, SP3, and SP4 code:

Previously fixed:
1. Buffer overflow in nwspool.dll. Identified as ZDI-CAN-146 (Bug 287919)

New Fixes:
2. When using the field test patch Novell Client 4.91 Post-SP4 NWSPOOL.DLL dated 2007-07-26 cannot see servers under NetWare servers when browsing. (Bug 300739)

3. Security vulnerability in NWSPOOL.DLL. This could be exploited to cause a DoS (Denial of Service) or compromise a vulnerable system. Identified as CVE-2007-2954. (Bug 300870)

4. After applying NDPPNT.DLL from 4.91 SP4, NDPS printer installation fails. This fix requires both the NDPPNT and NWSPOOL modules. (Bug 328755)

5. Possible buffer overflow condition. This fix applies only to NDPPNT.DLL (Bug 293086)

security fixes

ZDI-CAN-146 by TippingPoint Technologies
CVE-2007-2954 by Secunia

file contents

Compressed File Name: 491psp2_3_4_nwspool_1.zip

Files IncludedSizeDate
readme_5007240.htmlN/A2008-05-14 17:38:02

disclaimer

The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information. Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.

Novell is a registered trademark of Novell, Inc. in the United States and other countries. SUSE is a registered trademark of SUSE Linux AG, a Novell business. *All third-party trademarks are the property of their respective owners.

© 2007 Novell, Inc. All Rights Reserved.