COMMAND

    MS Netware client

SYSTEMS AFFECTED

    Win '95

PROBLEM

    Lauri Laupmaa reported following bug.   There seems to be  serious
    security  flaw  in  win95  dealing  with novell netware passwords.
    It's trivial to find netware  password in win95 swap file  by just
    scanning the hard disk for USERNAME (with some disk editor).   The
    only solution Lauri have found  is to disable virtual memory,  but
    this is not a SOLUTION, because  lot of programs just do not  work
    without it...    By default, this problem  is also present in  the
    latest (July 96) release of NetWare Client32 for Windows 95.

SOLUTION

    Unless  you  want  to  disable  swap  file, you can disabled it by
    going into  the Network  control panel  item, opening  the "Novell
    NetWare Client 32 Properties"  dialogue, and disabling the  "Cache
    NetWare Password" option on the "Advanced Options" page.