PT-2008-2285 · Novell · Novell Challenge Response Client

Published 2008-02-08 · Updated 2011-03-08 · CVE-2008-0663

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Novell Challenge Response Client (LCM) version 2.7.5 and earlier

Description The issue allows users with physical access to a locked system to obtain the contents of the clipboard by pasting the contents into the Challenge Question field.

Recommendations For Novell Challenge Response Client (LCM) version 2.7.5 and earlier, consider restricting physical access to locked systems to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2008-0663

Affected Products

Novell Challenge Response Client

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2008-0663 · Security Note
• http://secunia.com/advisories/28792 · Vendor Advisory
• http://securityfocus.com/bid/27631 · Note
• http://vupen.com/english/advisories/2008/0423/references · Note
• https://secure-support.novell.com/KanisaPlatform/Publishing/686/3726376_f.SAL_Public.html · Note
• http://securitytracker.com/id?1019304 · Note