high7.2Public exploit code
CVE-2013-3956
The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2 on Windows Vista and Windows Server 20…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Novell Client 2 SP3 - 'nicm.sys 3.1.11.0' Local Privilege Escalation2013-07-29 · local · windows · Verified
- Novell Client 2 SP3 - 'nicm.sys' Local Privilege Escalation (Metasploit)2013-06-26 · local · windows_x86 · Verified
Impact
The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2 on Windows Vista and Windows Server 2008; and Novell Client 2 SP3 on Windows Server 2008 R2, Windows 7, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted 0x143B6B IOCTL call.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Novell | Client | Versions 4.91, 2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://pastebin.com/GB4iiEwR
- http://www.exploit-db.com/exploits/26452
- http://www.exploit-db.com/exploits/27191
- http://www.novell.com/support/kb/doc.php?id=7012497
- http://pastebin.com/GB4iiEwR
- http://www.exploit-db.com/exploits/26452
- http://www.exploit-db.com/exploits/27191
- http://www.novell.com/support/kb/doc.php?id=7012497