CVE-2007-5762

NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \\.\nicm device and providing crafted kernel addresses via IOCTLs with the METHOD_NEITHER buffering mode.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=637	Patch
http://download.novell.com/Download?buildid=4FmI89wOmg4~	Patch
http://www.securityfocus.com/bid/27209	Patch
http://www.securitytracker.com/id?1019172
http://secunia.com/advisories/28396	Vendor Advisory
http://www.vupen.com/english/advisories/2008/0088
https://exchange.xforce.ibmcloud.com/vulnerabilities/39576

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:novell:netware_client:4.91:sp4:*:*:*:*:*:*

Information

Published : 2008-01-09 14:46

Updated : 2017-07-28 18:33

NVD link : CVE-2007-5762

Mitre link : CVE-2007-5762

JSON object : View

CWE

CWE-20

Improper Input Validation

Advertisement

Products Affected

novell

netware_client

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=637", "name": "20080109 Novell NetWare Client nicm.sys Local Privilege Escalation Vulnerability", "tags": ["Patch"], "refsource": "IDEFENSE"}, {"url": "http://download.novell.com/Download?buildid=4FmI89wOmg4~", "name": "http://download.novell.com/Download?buildid=4FmI89wOmg4~", "tags": ["Patch"], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/27209", "name": "27209", "tags": ["Patch"], "refsource": "BID"}, {"url": "http://www.securitytracker.com/id?1019172", "name": "1019172", "tags": [], "refsource": "SECTRACK"}, {"url": "http://secunia.com/advisories/28396", "name": "28396", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.vupen.com/english/advisories/2008/0088", "name": "ADV-2008-0088", "tags": [], "refsource": "VUPEN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/39576", "name": "novell-client-nicm-privilege-escalation(39576)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \\\\.\\nicm device and providing crafted kernel addresses via IOCTLs with the METHOD_NEITHER buffering mode."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-20"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2007-5762", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2008-01-09T22:46Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:novell:netware_client:4.91:sp4:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-07-29T01:33Z"}