Description
nwgina.dll in Novell Client 4.91 SP3 for Windows 2000/XP/2003 does not delete user profiles during a Terminal Service or Citrix session, which allows remote authenticated users to invoke alternate user profiles.
References
- ADV-2007-0064 vdb-entry
- 1017471 vdb-entry
- 21886 vdb-entry
- 31358 vdb-entry
- novell-profile-security-bypass(31343) vdb-entry
- 23619 third-party-advisory
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974970.htm