CVE-2007-5667

CVE-2007-5667 affects the Novell NetWare Client for Windows, where the nwfilter.sys driver is loaded at startup and exposes the local-device .wfilter via METHOD_NEITHER IOCTLs. The vulnerability allows an unprivileged local user to pass kernel addresses as arguments and overwrite kernel memory, e...

iDefense Security Advisory 11.12.07: Novell NetWare Client Local Privilege Escalation Vulnerability

iDefense Security Advisory 11.12.07 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 12, 2007 I. BACKGROUND The Novell Client software provides a workstation with access to Novell NetWare networks as well as Novell Open Enterprise Server OES services. Novell Clients can access the full...