Format String Vulnerability in Novell Client 4.91 by Novell

CVE-2006-6306

Summary

The Novell Client 4.91 SP2 and SP3 versions are susceptible to a format string vulnerability found in the Novell Modular Authentication Services (NMAS). This flaw permits users with physical access to the system to exploit format string specifiers in the Username field during the logon process. As a result, an attacker can potentially read sensitive information stored in stack and memory contents, leading to unauthorized data disclosure.

References