Secunia

Deral Heiland has reported a weakness in Novell Client, which can be exploited by malicious, local users to gain knowledge of sensitive information or cause a DoS (Denial of Service).

The weakness is caused due to a format string error within the processing of the "Username" field in the NMAS (Novell Modular Authentication Services) Information message window. This can be exploited to read arbitrary memory or crash the service via format string specifiers in the "Username" field and selecting "Sequences" under the NMAS tab.

The weakness is reported in versions 4.91 SP2, 4.91 SP2 Patch Kit, and 4.91 SP3. Other versions may also be affected.

Solution
Apply vendor patch.

Provided and/or discovered by
Deral Heiland, Layered Defense Research

Original Advisory
Novell:
https://secure-support.novell.com/KanisaPlatform/Publishing/372/3546910_f.SAL_Public.html

Layered Defense Research:
http://www.layereddefense.com/Novell01DEC.html

Deep Links
Links available in Customer Area