PT-2007-4222 · Novell+1 · Novell Extend Director+2

Published 2007-06-18 · Updated 2017-07-29 · CVE-2007-2923

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell exteNd Director version 4.1 Novell exteNd Portal Services version 4.1

Description The issue allows remote attackers to execute arbitrary commands due to a problem in the launch method of the LocalExec ActiveX control.

Recommendations For Novell exteNd Director version 4.1, consider disabling the LocalExec ActiveX control until a patch is available. For Novell exteNd Portal Services version 4.1, restrict access to the LocalExec ActiveX control to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2007-2923

Affected Products

Localexec Activex Control

Novell Extend Director

Novell Extend Portal Services

References · 10

• 🔥 http://securityfocus.com/bid/24493 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-2923 · Security Note
• http://vupen.com/english/advisories/2007/2235 · Note
• http://secunia.com/advisories/25710 · Note
• http://kb.cert.org/vuls/id/793433 · Note
• http://securitytracker.com/id?1018258 · Note
• http://osvdb.org/37318 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34898 · Note
• http://novell.com/documentation/nedse41/readmesp2.txt · Note
• https://secure-support.novell.com/KanisaPlatform/Publishing/360/3169416_f.SAL_Public.html · Note