CVE-2013-3956

2013-07-3113:20:28

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.2

Confidence

Low

EPSS

0.004

Percentile

75.0%

JSON

The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2 on Windows Vista and Windows Server 2008; and Novell Client 2 SP3 on Windows Server 2008 R2, Windows 7, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted 0x143B6B IOCTL call.

Affected configurations

Nvd

Node

novellclientMatch4.91sp5

AND

microsoftwindows_2003_server

microsoftwindows_xp

Node

novellclientMatch2.0sp2

AND

microsoftwindows_server_2008Match-

microsoftwindows_vista

Node

novellclientMatch2.0sp3

AND

microsoftwindows_7

microsoftwindows_8Match--x64

microsoftwindows_8Match--x86

microsoftwindows_server_2008Matchr2

VendorProductVersionCPE
novellclient4.91cpe:2.3:a:novell:client:4.91:sp5:*:*:*:*:*:*
microsoftwindows_2003_server*cpe:2.3:o:microsoft:windows_2003_server:*:*:*:*:*:*:*:*
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*
novellclient2.0cpe:2.3:a:novell:client:2.0:sp2:*:*:*:*:*:*
microsoftwindows_server_2008-cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*
microsoftwindows_vista*cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*
novellclient2.0cpe:2.3:a:novell:client:2.0:sp3:*:*:*:*:*:*
microsoftwindows_7*cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*
microsoftwindows_8-cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*
microsoftwindows_8-cpe:2.3:o:microsoft:windows_8:-:-:x86:*:*:*:*:*

Vendor	Product	Version	CPE
novell	client	4.91	cpe:2.3:a:novell:client:4.91:sp5::::::
microsoft	windows_2003_server	*	cpe:2.3:o:microsoft:windows_2003_server::::::::
microsoft	windows_xp	*	cpe:2.3:o:microsoft:windows_xp::::::::
novell	client	2.0	cpe:2.3:a:novell:client:2.0:sp2::::::
microsoft	windows_server_2008	-	cpe:2.3:o:microsoft:windows_server_2008:-:::::::*
microsoft	windows_vista	*	cpe:2.3:o:microsoft:windows_vista::::::::
novell	client	2.0	cpe:2.3:a:novell:client:2.0:sp3::::::
microsoft	windows_7	*	cpe:2.3:o:microsoft:windows_7::::::::
microsoft	windows_8	-	cpe:2.3:o:microsoft:windows_8:-:-:x64:::::*
microsoft	windows_8	-	cpe:2.3:o:microsoft:windows_8:-:-:x86:::::*