Description
Novell Client for Windows 4.8 and 4.9 does not restrict access to the clipboard contents while a machine is locked, which allows users with physical access to read the current clipboard contents by pasting them into the "User Name" field on the login prompt.
References
- 20194 third-party-advisory
- 20060521 Novell Client login form enables reading and writing from and to the clipboard of the logged-in user mailing-list
- 25760 vdb-entry
- 961 third-party-advisory
- 20060522 Re: Novell Client login form enables reading and writing from and to the clipboard of the logged-in user mailing-list
- novell-client-clipboard-leak(26595) vdb-entry