PT-2013-4761 · Novell · Nicm.Sys+1

Published 2013-07-31 · Updated 2013-08-22 · CVE-2013-3956

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell Client versions 4.91 SP5, 2 SP2, and 2 SP3

Description The issue allows local users to gain privileges via a crafted 0x143B6B IOCTL call to the NICM.SYS kernel driver.

Recommendations For Novell Client version 4.91 SP5, consider restricting access to the NICM.SYS kernel driver until a patch is available. For Novell Client version 2 SP2, avoid using the 0x143B6B IOCTL call in the affected kernel driver until the issue is resolved. For Novell Client version 2 SP3, restrict access to the vulnerable NICM.SYS kernel driver to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-3956

Affected Products

Nicm.Sys

Novell Client

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/novell_client_nicm.rb · Exploit
• 🔥 http://exploit-db.com/exploits/26452 · Exploit
• 🔥 https://exploit-db.com/exploits/27191 · Exploit
• 🔥 http://exploit-db.com/exploits/27191 · Exploit
• 🔥 https://exploit-db.com/exploits/26452 · Exploit
• 🔥 http://pastebin.com/GB4iiEwR · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-3956 · Security Note
• http://novell.com/support/kb/doc.php?id=7012497 · Vendor Advisory