CVE-2007-0108: Novell Client

Medium severity, CVSS 6.0. EPSS: 1.2% chance of exploitation in the next 30 days.

nwgina.dll in Novell Client 4.91 SP3 for Windows 2000/XP/2003 does not delete user profiles during a Terminal Service or Citrix session, which allows remote authenticated users to invoke alternate user profiles.

Affected products

  • Novell Client: version 4.91 only

Published 2007-01-09. Last modified 2026-06-16.