Lucene search
HistoryMay 12, 2008 - 7:20 p.m.
CVE-2008-2145
novell client
buffer overflow
denial of service
arbitrary code
cve-2008-2145
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
23.1%
Stack-based buffer overflow in Novell Client 4.91 SP4 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long username in the “forgotten password” dialog.
Affected configurations
Node
novellclientMatch4.91sp1
ORnovellclientMatch4.91sp2
ORnovellclientMatch4.91sp3
ORnovellclientMatch4.91sp4
| CPE | Name | Operator | Version |
|---|---|---|---|
| novell:client | novell client | eq | 4.91 |
Related
nvd
nvd
CVE-2008-2145
2008-05-12 19:20:00
prion
prion
Stack overflow
2008-05-12 19:20:00
cvelist
cvelist
CVE-2008-2145
2008-05-12 19:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
23.1%
Related for CVE-2008-2145