Novell Client for Windows 'nicm. sys' Local Privilege Escalation Vulnerability

Release date:
Updated on: 2013-05-30

Affected Systems:
Novell Client for Windows NT/2000/XP 4.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 60203
 
The Novell Client workstation software extends the functionality of Linux and Windows desktops by providing access to NetWare and Open Enterprise Server (OES.
 
Novell Client 2 SP3 for Windows 7/8 has an error in processing NICM_IOCTL_REQUEST_REPLY "(0x143B6B) IOCTL requests in NICM. SYS. You can export the kernel permission to execute any code.
 
<* Source: anonymous

Link: http://secunia.com/advisories/53630/
Http://www.novell.com/support/kb/doc.php? Id = 7012497
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Novell
------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:
 
Http://www.novell.com/zh-cn/products/openenterpriseserver/features/clients.html