CVEvulnerability
CVE-2006-6306
1.2 LOW
Official page ↗
- Status
- Modified
- Published
- 2006-12-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 1.2 LOW — AV:L/AC:H/Au:N/C:P/I:N/A:N
Description
Format string vulnerability in Novell Modular Authentication Services (NMAS) in the Novell Client 4.91 SP2 and SP3 allows users with physical access to read stack and memory contents via format string specifiers in the Username field of the logon window.
Affected configurations
• novell client 4.91
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051038.html Vendor Advisory
- http://secunia.com/advisories/23363 secunia.com
- http://securityreason.com/securityalert/1970 securityreason.com
- http://securitytracker.com/id?1017377 securitytracker.com
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974872.htm support.novell.com
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974876.htm support.novell.com
- http://www.layereddefense.com/Novell01DEC.html Vendor Advisory
- http://www.securityfocus.com/archive/1/453176/100/0/threaded www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4987 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30644 exchange.xforce.ibmcloud.com
- https://secure-support.novell.com/KanisaPlatform/Publishing/372/3546910_f.SAL_Public.html secure-support.novell.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051038.html Vendor Advisory
- http://secunia.com/advisories/23363 secunia.com
- http://securityreason.com/securityalert/1970 securityreason.com
- http://securitytracker.com/id?1017377 securitytracker.com
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974872.htm support.novell.com
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974876.htm support.novell.com
- http://www.layereddefense.com/Novell01DEC.html Vendor Advisory
- http://www.securityfocus.com/archive/1/453176/100/0/threaded www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4987 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30644 exchange.xforce.ibmcloud.com
- https://secure-support.novell.com/KanisaPlatform/Publishing/372/3546910_f.SAL_Public.html secure-support.novell.com