Lucene search
HistoryApr 21, 2009 - 4:24 p.m.
CVE-2009-1350
cve-2009-1350
novell
netidentity client
vulnerability
remote execution
ipc$ connection
xtierrpcpipe
rpc messages
pointer dereference
nvd
7.3 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.964 High
EPSS
Percentile
99.6%
Unspecified vulnerability in xtagent.exe in Novell NetIdentity Client before 1.2.4 allows remote attackers to execute arbitrary code by establishing an IPC$ connection to the XTIERRPCPIPE named pipe, and sending RPC messages that trigger a dereference of an arbitrary pointer.
| CPE | Name | Operator | Version |
|---|---|---|---|
| novell:netidentity_client1.2.3 | novell netidentity client1.2.3 | eq | * |
References
Related
checkpoint_advisories
checkpoint_advisories
saint
saint
nessus
nessus
openvas
openvas
prion
prion
Null pointer dereference
2009-04-21 16:24:00
zdi
zdi
packetstorm
packetstorm
Novell NetIdentity Agent XTIERRPCPIPE Named Pipe Buffer Overflow
2009-11-26 00:00:00
cvelist
cvelist
CVE-2009-1350
2009-04-21 16:00:00
7.3 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.964 High
EPSS
Percentile
99.6%
Related for CVE-2009-1350