CVE-2007-5762
NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \.\nicm device and providing crafted kernel addresses via IOCTLs with the METHOD_NEITHER buffering mode.
| Software | From | Fixed in |
|---|---|---|
| novell / netware_client | 4.91-sp4 | 4.91-sp4.x |
- http://download.novell.com/Download?buildid=4FmI89wOmg4~
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=637
- http://secunia.com/advisories/28396
- http://www.securityfocus.com/bid/27209
- http://www.securitytracker.com/id?1019172
- http://www.vupen.com/english/advisories/2008/0088
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39576
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime