Unscored severity · published Dec 5, 2006
CVE-2006-6306
Format string vulnerability in Novell Modular Authentication Services (NMAS) in the Novell Client 4.91 SP2 and SP3 allows users with physical access to read stack and memory…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Format string vulnerability in Novell Modular Authentication Services (NMAS) in the Novell Client 4.91 SP2 and SP3 allows users with physical access to read stack and memory contents via format string specifiers in the Username field of the logon window.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
Client · Novell
4.91; 4.91 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-6306
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-6306
Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051038.html
secunia.com
http://secunia.com/advisories/23363
securityreason.com
http://securityreason.com/securityalert/1970
securitytracker.com
http://securitytracker.com/id?1017377
support.novell.com
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974872.htm
support.novell.com
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974876.htm
More from Client
–
CVE-2013-3705
The VBA32 AntiRootKit component for Novell Client 2 SP3 before IR5 on Windows allows local users to cause a denial of service (bugcheck and BSOD) via an IOCTL call for an invalid…
–
CVE-2013-3956
The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2 on Windows Vista and Windows Server 2008; and Novell…
–
CVE-2013-3697
Integer overflow in the NWFS.SYS kernel driver 4.91.5.8 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003 and the NCPL.SYS kernel driver in Novell Client 2 SP2 on…
–
CVE-2008-2145
Stack-based buffer overflow in Novell Client 4.91 SP4 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long username…
–
CVE-2008-0639
Stack-based buffer overflow in the EnumPrinters function in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2, SP3, and SP4 for Windows allows remote attackers to…