PT-2008-2285 · Novell · Novell Challenge Response Client

Publicado 2008-02-08 · Atualizado 2011-03-08 · CVE-2008-0663

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Novell Challenge Response Client (LCM) version 2.7.5 and earlier

Description The issue allows users with physical access to a locked system to obtain the contents of the clipboard by pasting the contents into the Challenge Question field.

Recommendations For Novell Challenge Response Client (LCM) version 2.7.5 and earlier, consider restricting physical access to locked systems to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2008-0663

Produtos afetados

Novell Challenge Response Client

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2008-0663 · Nota de Segurança
• http://securityfocus.com/bid/27631 · Nota
• http://secunia.com/advisories/28792 · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/0423/references · Nota
• https://secure-support.novell.com/KanisaPlatform/Publishing/686/3726376_f.SAL_Public.html · Nota
• http://securitytracker.com/id?1019304 · Nota