Lucene search

MicrofocusCVELIST:CVE-2018-7687

HistoryMay 21, 2018 - 8:00 p.m.

CVE-2018-7687 Client for OES Elevation of Privilege via Buffer Overflow

2018-05-2120:00:00

microfocus

www.cve.org

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

19.5%

JSON

The Micro Focus Client for OES before version 2 SP4 IR8a has a vulnerability that could allow a local attacker to elevate privileges via a buffer overflow in ncfsd.sys.

CNA Affected

[
  {
    "product": "Client for Open Enterprise Server",
    "vendor": "Micro Focus",
    "versions": [
      {
        "lessThan": "2 SP4 (IR8a)",
        "status": "affected",
        "version": "2 SP4 (IR8a)",
        "versionType": "custom"
      }
    ]
  }
]

References

bugzilla.novell.com/show_bug.cgi?id=1093607

www.novell.com/support/kb/doc.php?id=7022983

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

19.5%

JSON

Related for CVELIST:CVE-2018-7687