Novell Client for Windows 'nicm.sys 'Local Privilege Escalation Vulnerability

Bugtraq ID:	27209
Class:	Input Validation Error
CVE:	CVE-2007-5762
Remote:	No
Local:	Yes
Published:	Jan 09 2008 12:00AM
Updated:	Jan 11 2008 02:29AM
Credit:	Stephen Fewer of Harmony Security discovered this issue.
Vulnerable:	Novell Client 4.91 SP4 Novell Client 4.91 SP3
Not Vulnerable:

Novell Client for Windows 'nicm.sys 'Local Privilege Escalation Vulnerability

Novell Client for Windows is prone to a local privilege-escalation vulnerability because it fails to adequately handle user-supplied input.

An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers.

Novell Client for Windows 4.91 SP3 and SP4 are vulnerable; other versions may also be affected.

Novell Client for Windows 'nicm.sys 'Local Privilege Escalation Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Novell Client for Windows 'nicm.sys 'Local Privilege Escalation Vulnerability

Solution:
Novell released an advisory and updates to address this issue. Please see the references for more information.

Novell Client for Windows 'nicm.sys 'Local Privilege Escalation Vulnerability

References:

• Novell Client 4.91 Post-SP3/4 NICM.SYS (Novell)
  
• Novell Homepage (Novell)
  
• Novell NetWare Client nicm.sys Local Privilege Escalation Vulnerability (iDefense Labs)
  
• iDefense Security Advisory 01.09.08: Novell NetWare Client nicm.sys (iDefense Labs )