Stack-based Buffer Overflow in Novell Client by Novell

CVE-2008-2145

Summary

A stack-based buffer overflow vulnerability exists in Novell Client versions 4.91 SP4 and earlier, where local users can exploit the 'forgotten password' dialog. By inputting an overly long username, malicious actors may cause the application to crash, resulting in a denial of service. There is also a risk that this vulnerability could be leveraged to execute arbitrary code, posing a significant threat to system integrity.

References