CVE-2007-0108 - Vulnerability Details - OpenCVE

nwgina.dll in Novell Client 4.91 SP3 for Windows 2000/XP/2003 does not delete user profiles during a Terminal Service or Citrix session, which allows remote authenticated users to invoke alternate user profiles.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.01688.

Key SSVC decision points have not yet been added.

Vendors	Products
Novell	Client

Configuration 1 [-]

cpe:2.3:a:novell:client:4.91:sp3:*:*:*:*:*:*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2007-0112	nwgina.dll in Novell Client 4.91 SP3 for Windows 2000/XP/2003 does not delete user profiles during a Terminal Service or Citrix session, which allows remote authenticated users to invoke alternate user profiles.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://osvdb.org/31358
http://secunia.com/advisories/23619
http://securitytracker.com/id?1017471
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974970.htm
http://www.securityfocus.com/bid/21886
http://www.vupen.com/english/advisories/2007/0064
https://exchange.xforce.ibmcloud.com/vulnerabilities/31343

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-01-09T00:00:00

Updated: 2024-08-07T12:03:37.126Z

Reserved: 2007-01-08T00:00:00

Link: CVE-2007-0108

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2007-01-09T00:28:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-0108

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-01-04T00:00:00", "descriptions": [{"lang": "en", "value": "nwgina.dll in Novell Client 4.91 SP3 for Windows 2000/XP/2003 does not delete user profiles during a Terminal Service or Citrix session, which allows remote authenticated users to invoke alternate user profiles."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "ADV-2007-0064", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/0064"}, {"name": "1017471", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1017471"}, {"name": "21886", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/21886"}, {"name": "31358", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/31358"}, {"name": "novell-profile-security-bypass(31343)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31343"}, {"name": "23619", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/23619"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974970.htm"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-0108", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "nwgina.dll in Novell Client 4.91 SP3 for Windows 2000/XP/2003 does not delete user profiles during a Terminal Service or Citrix session, which allows remote authenticated users to invoke alternate user profiles."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "ADV-2007-0064", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/0064"}, {"name": "1017471", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1017471"}, {"name": "21886", "refsource": "BID", "url": "http://www.securityfocus.com/bid/21886"}, {"name": "31358", "refsource": "OSVDB", "url": "http://osvdb.org/31358"}, {"name": "novell-profile-security-bypass(31343)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31343"}, {"name": "23619", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/23619"}, {"name": "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974970.htm", "refsource": "CONFIRM", "url": "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974970.htm"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T12:03:37.126Z"}, "title": "CVE Program Container", "references": [{"name": "ADV-2007-0064", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/0064"}, {"name": "1017471", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1017471"}, {"name": "21886", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/21886"}, {"name": "31358", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/31358"}, {"name": "novell-profile-security-bypass(31343)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31343"}, {"name": "23619", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/23619"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974970.htm"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-0108", "datePublished": "2007-01-09T00:00:00", "dateReserved": "2007-01-08T00:00:00", "dateUpdated": "2024-08-07T12:03:37.126Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:novell:client:4.91:sp3:*:*:*:*:*:*", "matchCriteriaId": "F0CBDEB2-98CF-4C6A-A45A-F5B61803E449", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "nwgina.dll in Novell Client 4.91 SP3 for Windows 2000/XP/2003 does not delete user profiles during a Terminal Service or Citrix session, which allows remote authenticated users to invoke alternate user profiles."}, {"lang": "es", "value": "nwgina.dll en Novell Client 4.91 SP3 para Windows 2000/XP/2003 no elimina los perfiles de usuario durante una sesi\u00f3n de Servicio de Terminal o Citrix, lo cual permite a usuarios autenticados remotamente invocar perfiles de usuario alternativos."}], "id": "CVE-2007-0108", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 6.8, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-01-09T00:28:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/31358"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/23619"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1017471"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974970.htm"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/21886"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/0064"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31343"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/31358"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/23619"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1017471"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974970.htm"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/21886"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/0064"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31343"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}