Novell NetIdentity Agent 'XTIERRPCPIPE' Remote Code Execution Vulnerability
BID:34400
Info
Novell NetIdentity Agent 'XTIERRPCPIPE' Remote Code Execution Vulnerability
| Bugtraq ID: | 34400 |
| Class: | Design Error |
| CVE: |
CVE-2009-1350 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 06 2009 12:00AM |
| Updated: | Jul 21 2009 03:16PM |
| Credit: | Ruben Santamarta |
| Vulnerable: |
Novell NetIdentity Agent 1.2.3 |
| Not Vulnerable: |
Novell NetIdentity Agent 1.2.4 build 1.2.612 |
Discussion
Novell NetIdentity Agent 'XTIERRPCPIPE' Remote Code Execution Vulnerability
Novell NetIdentity Agent is prone to a remote code-execution vulnerability.
Attackers could exploit this issue to execute arbitrary code with SYSTEM-level privileges. Failed exploit attempts will likely cause denial-of-service conditions.
Novell NetIdentity Agent 1.2.3 is vulnerable; other versions may be affected as well.
Novell NetIdentity Agent is prone to a remote code-execution vulnerability.
Attackers could exploit this issue to execute arbitrary code with SYSTEM-level privileges. Failed exploit attempts will likely cause denial-of-service conditions.
Novell NetIdentity Agent 1.2.3 is vulnerable; other versions may be affected as well.
Exploit / POC
Novell NetIdentity Agent 'XTIERRPCPIPE' Remote Code Execution Vulnerability
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
The following Metasploit exploit module is available:
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
The following Metasploit exploit module is available:
Solution / Fix
Novell NetIdentity Agent 'XTIERRPCPIPE' Remote Code Execution Vulnerability
Solution:
The vendor has released an upgrade. Please see the references for more information.
Solution:
The vendor has released an upgrade. Please see the references for more information.
References
Novell NetIdentity Agent 'XTIERRPCPIPE' Remote Code Execution Vulnerability
References:
References:
- NetIdentity Agent Overview (Novell)
- Novell Client/NetIdentity Agent Remote Arbitrary Pointer Dereference Code Execut (TippingPoint)
- Novell Client/NetIdentity Agent Remote Arbitrary Pointer Dereference Code Execut (ZDI Disclosures
- 5046720 Novell NetIdentity 1.2.4 (Novell)