String format vulnerability at client login prompt

A format string vulnerability exists due to improper processing of format strings within NMAS

 (Novell Modular Authentication  Services) Information message window. An attacker who enters

 special crafted format strings in the Username field at the Novell logon and selects Sequences

 under the NMAS tab can read data from the winlogon process stack or read from arbitrary

 memory, and at a minimum cause a denial of service.