Description
NICM.SYS driver 3.0.0.4, as used in Novell NetWare Client 4.91 SP4, allows local users to execute arbitrary code by opening the \\.\nicm device and providing crafted kernel addresses via IOCTLs with the METHOD_NEITHER buffering mode.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by sickness · pythonlocalwindows
https://www.exploit-db.com/exploits/18914
References (7)
Core 7
Core References
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/27209
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/28396
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0088
Patch x_refsource_confirm
http://download.novell.com/Download?buildid=4FmI89wOmg4~
Patch third-party-advisory
x_refsource_idefense
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=637
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/39576
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1019172
Scores
EPSS
0.0048
EPSS Percentile
65.0%
Details
CWE
CWE-20
Status
published
Products (1)
novell/netware_client
4.91 sp4
Published
Jan 09, 2008
Tracked Since
Feb 18, 2026