NVD

Id
57729  
Name
CVE-2007-5667  
Description
NWFILTER.SYS in Novell Client 4.91 SP 1 through SP 4 for Windows 2000, XP, and Server 2003 makes the . wfilter device available for arbitrary user-mode input via METHOD_NEITHER IOCTLs, which allows local users to gain privileges by passing a kernel address as an argument and overwriting kernel memory locations.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-11-13  
Modified Date
2011-03-07  
Seq
2007-5667  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
295437 57729 CVE-2007-5667 20071112 Novell NetWare Client NWFILTER.SYS Local Privilege Escalation Vulnerability  View
295438 57729 CVE-2007-5667 26420  View
295439 57729 CVE-2007-5667 1018943  View
295440 57729 CVE-2007-5667 ADV-2007-3846  View
295441 57729 CVE-2007-5667 novell-client-nwfilter-privilege-escalation(38434)  View
295442 57729 CVE-2007-5667 https://secure-support.novell.com/KanisaPlatform/Publishing/98/3260263_f.SAL_Public.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55883 JVNDB-2007-004575 Windows 用の Novell Client における権限を取得される脆弱性 Windows 用の Novell Client の NWFILTER.SYS は、METHOD_NEITHER IOCTL を介した任意のユーザモード入力を可能とする . wfilter デバイスを有効にするため、権限を取得される脆弱性が存在します。 CVE-2007-5667 29022 CVE-2007-5667 57729 7.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004575.html 2007-11-13 2012-09-25 View