Novell Client / Client 2 Multiple Vulnerabilities

The version of Novell Client or Novell Client 2 installed on the remote Windows host is potentially affected by the following vulnerabilities : - An error exists related to 'nicm.sys' and handling '0x143b6b' IOCTL requests that could allow arbitrary code execution. CVE-2013-3956 - An integer...

CVE-2013-3956

creationtimestamp| type| source ---|---|--- 2013-06-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26452 2013-07-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27191 2018-05-29 15:50:33+00:00| seen|...

Novell Client 2 SP3 nicm.sys Local Privilege Escalation

This module exploits a flaw in the nicm.sys driver to execute arbitrary code in kernel space. The vulnerability occurs while handling ioctl requests with code 0x143B6B, where a user provided pointer is used as function pointer. The module has been tested successfully on Windows 7 SP1 with Novell...