Description
Stack-based buffer overflow in Novell Client 4.91 SP4 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long username in the "forgotten password" dialog.
References
- ADV-2008-1503 vdb-entry
- 29109 vdb-entry
- 3868 third-party-advisory
- novell-client-username-bo(42359) vdb-entry
- 20080508 Novell Client <= 4.91 SP4 Local Stack overflow / B.S.O.D (unauthentificated user) mailing-list
- 30126 third-party-advisory
- 1020020 vdb-entry