Novell Client For Windows vulnerabilities

2 CVEs affecting Novell Client For Windows, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-3158, published 2008-07-11.

More from Novell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2008-3158, published 2008-07-11. Medium severity, CVSS 6.9. EPSS: 5.5% chance of exploitation in the next 30 days. Unspecified vulnerability in NWFS.SYS in Novell Client for Windows 4.91 SP4 has unknown impact and attack vectors, possibly related to IOCTL requests that overwrite arbitrary memory.
• CVE-2008-0663, published 2008-02-08. Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days. Novell Challenge Response Client (LCM) 2.7.5 and earlier, as used with Novell Client for Windows 4.91 SP4, allows users with physical access to a locked system to obtain contents of the clipboard by…