CVE-2006-6306

Description

Format string vulnerability in Novell Modular Authentication Services (NMAS) in the Novell Client 4.91 SP2 and SP3 allows users with physical access to read stack and memory contents via format string specifiers in the Username field of the logon window.

References

https://secure-support.novell.com/KanisaPlatform/Publishing/372/3546910_f.SAL_Public.html

https://exchange.xforce.ibmcloud.com/vulnerabilities/30644

http://www.vupen.com/english/advisories/2006/4987

http://www.securityfocus.com/archive/1/453176/100/0/threaded

http://www.layereddefense.com/Novell01DEC.html

http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974876.htm

http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974872.htm

http://securitytracker.com/id?1017377

http://securityreason.com/securityalert/1970

http://secunia.com/advisories/23363

http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051038.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS