PT-2013-4761 · Novell · Nicm.Sys+1

Publicado 2013-07-31 · Atualizado 2013-08-22 · CVE-2013-3956

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell Client versions 4.91 SP5, 2 SP2, and 2 SP3

Description The issue allows local users to gain privileges via a crafted 0x143B6B IOCTL call to the NICM.SYS kernel driver.

Recommendations For Novell Client version 4.91 SP5, consider restricting access to the NICM.SYS kernel driver until a patch is available. For Novell Client version 2 SP2, avoid using the 0x143B6B IOCTL call in the affected kernel driver until the issue is resolved. For Novell Client version 2 SP3, restrict access to the vulnerable NICM.SYS kernel driver to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-3956

Produtos afetados

Nicm.Sys

Novell Client

Referências · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/novell_client_nicm.rb · Exploit
• 🔥 http://exploit-db.com/exploits/26452 · Exploit
• 🔥 https://exploit-db.com/exploits/27191 · Exploit
• 🔥 http://exploit-db.com/exploits/27191 · Exploit
• 🔥 https://exploit-db.com/exploits/26452 · Exploit
• 🔥 http://pastebin.com/GB4iiEwR · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-3956 · Nota de Segurança
• http://novell.com/support/kb/doc.php?id=7012497 · Aviso do Fabricante