Unscored severity · published Jan 9, 2007
CVE-2007-0108
nwgina.dll in Novell Client 4.91 SP3 for Windows 2000/XP/2003 does not delete user profiles during a Terminal Service or Citrix session, which allows remote authenticated users to…
–
CVSS
1.2%
EPSS
No
On KEV
Description
nwgina.dll in Novell Client 4.91 SP3 for Windows 2000/XP/2003 does not delete user profiles during a Terminal Service or Citrix session, which allows remote authenticated users to invoke alternate user profiles.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
Client · Novell
4.91 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0108
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0108
osvdb.org
http://osvdb.org/31358
Vendor Advisory
http://secunia.com/advisories/23619
securitytracker.com
http://securitytracker.com/id?1017471
Vendor Advisory
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974970.htm
www.securityfocus.com
http://www.securityfocus.com/bid/21886
www.vupen.com
http://www.vupen.com/english/advisories/2007/0064
More from Client
–
CVE-2013-3705
The VBA32 AntiRootKit component for Novell Client 2 SP3 before IR5 on Windows allows local users to cause a denial of service (bugcheck and BSOD) via an IOCTL call for an invalid…
–
CVE-2013-3956
The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2 on Windows Vista and Windows Server 2008; and Novell…
–
CVE-2013-3697
Integer overflow in the NWFS.SYS kernel driver 4.91.5.8 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003 and the NCPL.SYS kernel driver in Novell Client 2 SP2 on…
–
CVE-2008-2145
Stack-based buffer overflow in Novell Client 4.91 SP4 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long username…
–
CVE-2008-0639
Stack-based buffer overflow in the EnumPrinters function in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2, SP3, and SP4 for Windows allows remote attackers to…