Unscored severity · published May 12, 2008
CVE-2008-2145
Stack-based buffer overflow in Novell Client 4.91 SP4 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long username…
–
CVSS
0.5%
EPSS
No
On KEV
Description
Stack-based buffer overflow in Novell Client 4.91 SP4 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long username in the "forgotten password" dialog.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 41% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
Client · Novell
4.91; 4.91; 4.91; 4.91 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2145
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2145
secunia.com
http://secunia.com/advisories/30126
securityreason.com
http://securityreason.com/securityalert/3868
www.securityfocus.com
http://www.securityfocus.com/archive/1/491814/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/29109
www.securitytracker.com
http://www.securitytracker.com/id?1020020
www.vupen.com
http://www.vupen.com/english/advisories/2008/1503
More from Client
–
CVE-2013-3705
The VBA32 AntiRootKit component for Novell Client 2 SP3 before IR5 on Windows allows local users to cause a denial of service (bugcheck and BSOD) via an IOCTL call for an invalid…
–
CVE-2013-3956
The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2 on Windows Vista and Windows Server 2008; and Novell…
–
CVE-2013-3697
Integer overflow in the NWFS.SYS kernel driver 4.91.5.8 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003 and the NCPL.SYS kernel driver in Novell Client 2 SP2 on…
–
CVE-2008-0639
Stack-based buffer overflow in the EnumPrinters function in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2, SP3, and SP4 for Windows allows remote attackers to…
–
CVE-2007-6701
Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP4 for Windows allow remote attackers to execute arbitrary code via long…