Exploitation Summary
EIP tracks 2 public exploits for CVE-2008-3158.
PoCs published by Metasploit, Ruben Santamarta, juan vazquez, including Metasploit module exploits/windows/local/novell_client_nwfs.
AI-analyzed exploit summary This Metasploit module exploits a flaw in the nwfs.sys driver to overwrite kernel data via ioctl requests, enabling local privilege escalation by corrupting the HalDispatchTable and executing arbitrary code.
Description
Unspecified vulnerability in NWFS.SYS in Novell Client for Windows 4.91 SP4 has unknown impact and attack vectors, possibly related to IOCTL requests that overwrite arbitrary memory.
Exploits (2)
This Metasploit module exploits a flaw in the nwfs.sys driver to overwrite kernel data via ioctl requests, enabling local privilege escalation by corrupting the HalDispatchTable and executing arbitrary code.
This Metasploit module exploits a flaw in the nwfs.sys driver to overwrite data in kernel space, allowing local privilege escalation on Windows XP SP3 with Novell Client 4.91 SP4. It uses an ioctl request to corrupt memory and overwrite the HalDispatchTable to execute arbitrary code.