Lucene search
HistoryJan 09, 2008 - 10:46 p.m.
CVE-2007-5762
nicm.sys
driver
vulnerability
novell netware client
cve-2007-5762
nvd
arbitrary code execution
ioctls
method_neither
kernel addresses
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
0.4%
NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \.\nicm device and providing crafted kernel addresses via IOCTLs with the METHOD_NEITHER buffering mode.
Affected configurations
Node
novellnetware_clientMatch4.91sp4
| CPE | Name | Operator | Version |
|---|---|---|---|
| novell:netware_client | novell netware client | eq | 4.91 |
References
Related
seebug
seebug
Novell Client 4.91 SP4 - Privilege Escalation Exploit
2014-07-01 00:00:00
Novell Client for Windows nicm.sys้ฉฑๅจๆฌๅฐๆ้ๆๅๆผๆด
2008-01-11 00:00:00
Novell Client for Windowsๅฃไปค้็ฝฎๆฌๅฐๆ ๆบขๅบๆผๆด
2008-05-12 00:00:00
cvelist
cvelist
CVE-2007-5762
2008-01-09 22:00:00
exploitpack
exploitpack
Novell Client 4.91 SP4 - Local Privilege Escalation
2012-05-22 00:00:00
packetstorm
packetstorm
Novell Client 4.91 SP3/4 Privilege Escalation
2012-05-23 00:00:00
prion
prion
Code injection
2008-01-09 22:46:00
securityvulns
securityvulns
nvd
nvd
CVE-2007-5762
2008-01-09 22:46:00
nessus
nessus
Novell Client nicm.sys Local Privilege Escalation
2008-01-10 00:00:00
exploitdb
exploitdb
Novell Client 4.91 SP4 - Local Privilege Escalation
2012-05-22 00:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
0.4%
Related for CVE-2007-5762