The NantSys device 5.0.0.115 in Motorola netOctopus 5.1.2 build 1011 has weak permissions for the \\.\NantSys device interface (nantsys.sys), which allows local users to gain privileges or cause a denial of service (system crash), as demonstrated by modifying the SYSENTER_EIP_MSR CPU Model Specific Register (MSR) value.
References
Configurations
Information
Published : 2008-01-08 16:46
Updated : 2017-07-28 18:33
NVD link : CVE-2007-5761
Mitre link : CVE-2007-5761
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
motorola
- netoctopus