1.2

CVE-2006-6306

Format string vulnerability in Novell Modular Authentication Services (NMAS) in the Novell Client 4.91 SP2 and SP3 allows users with physical access to read stack and memory contents via format string specifiers in the Username field of the logon window.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Novell ≫ Client Version4.91 Updatesp2
Novell ≫ Client Version4.91 Updatesp3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.35% 0.273
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 1.2 1.9 2.9
AV:L/AC:H/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051038.html
Vendor Advisory
http://secunia.com/advisories/23363
http://securityreason.com/securityalert/1970
http://securitytracker.com/id?1017377
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974872.htm
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974876.htm
http://www.layereddefense.com/Novell01DEC.html
Vendor Advisory
http://www.securityfocus.com/archive/1/453176/100/0/threaded
http://www.vupen.com/english/advisories/2006/4987
https://exchange.xforce.ibmcloud.com/vulnerabilities/30644
https://secure-support.novell.com/KanisaPlatform/Publishing/372/3546910_f.SAL_Public.html