CVE-2006-2612
Novell Client for Windows 4.8 and 4.9 does not restrict access to the clipboard contents while a...
Novell Client for Windows 4.8 and 4.9 does not restrict access to the clipboard contents while a machine is locked, which allows users with physical access to read the current clipboard contents by pasting them into the "User Name" field on the login prompt.
Exploit likelihood
What each source reports
NVD Score used
2.1
Novell Client for Windows 4.8 and 4.9 does not restrict access to the clipboard contents while a machine is locked, which allows users with physical access to read the current clipboard contents by pasting them into the "User Name" field on the login prompt.
- Record
CVE-2006-2612- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Novell Client for Windows 4.8 and 4.9 does not restrict access to the clipboard contents while a machine is locked, which allows users with physical access to read the current clipboard contents by pasting them into the "User Name" field on the login prompt.
- Record
CVE-2006-2612- Updated
- 2026-11-02
EUVDEUVD-2006-2611 No score
Novell Client for Windows 4.8 and 4.9 does not restrict access to the clipboard contents while a machine is locked, which allows users with physical access to read the current clipboard contents by pasting them into the "User Name" field on the login prompt.
- Record
EUVD-2006-2611- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-87xr-gq6g-3x4c No score
Novell Client for Windows 4.8 and 4.9 does not restrict access to the clipboard contents while a...
Novell Client for Windows 4.8 and 4.9 does not restrict access to the clipboard contents while a machine is locked, which allows users with physical access to read the current clipboard contents by pasting them into the "User Name" field on the login prompt.
- Record
GHSA-87xr-gq6g-3x4c- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-2612 is a low vulnerability (CVSS 2.1) in Novell Client, published May 26, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 31st percentile. No source names a fixed version.
References
secunia.com/advisories/20194
securityfocus.com/archive/1/434704/100/0/threaded
osvdb.org/25760
securityreason.com/securityalert/961
securityfocus.com/archive/1/434724/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/26595
nvd.nist.gov/vuln/detail/CVE-2006-2612
github.com/advisories/GHSA-87xr-gq6g-3x4c