Novell NeaatIdentity RPC Pointer Dereference Code Execution - Ver2 (CVE-2009-1350)

A code execution vulnerability has been reported in Novell Client NetIdentity Agent. The vulnerability is due to insufficient sanity check when processing crafted RPC messages. A remote attacker could exploit this vulnerability by sending a specially crafted RPC message to the affected service...

CVE-2009-1350

creationtimestamp| type| source ---|---|--- 2010-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16376 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/netidentityxtierrpcpipe.rb 2025-02-06 03:13:39+00:00...

Novell NetIdentity Agent - XTIERRPCPIPE Named Pipe Buffer Overflow (Metasploit)

$Id: netidentityxtierrpcpipe.rb 11127 2010-11-24 19:35:38Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Novell NetIdentity Agent XTIERRPCPIPE Named Pipe Buffer Overflow

This module exploits a stack buffer overflow in Novell's NetIdentity Agent. When sending a specially crafted string to the 'XTIERRPCPIPE' named pipe, an attacker may be able to execute arbitrary code. The success of this module is much greater once the service has been restarted. This module...

CVE-2009-1350

CVE-2009-1350 affects Novell NetIdentity Client (xtagent.exe). A remote attacker can trigger a dereference of an arbitrary pointer via the XTIERRPCPIPE named pipe by sending crafted RPC messages, leading to remote code execution. Affected product/version: Novell Client NetIdentity Agent prior to ...