CVE-2007-5667: Input Validation
NWFILTER.SYS in Novell Client 4.91 SP 1 through SP 4 for Windows 2000, XP, and Server 2003 makes the \.\nwfilter device available for arbitrary user-mode input via METHODNEITHER IOCTLs, which allows local users to gain privileges by passing a kernel address as an argument and overwriting kernel memory locations.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5667?
CVE-2007-5667 has a medium severity level, as it allows local users to gain elevated privileges through inappropriate access to the NWFILTER.SYS driver.
How do I fix CVE-2007-5667?
To fix CVE-2007-5667, ensure you have upgraded to the latest version of Novell Client that addresses this vulnerability.
Who is affected by CVE-2007-5667?
The vulnerability affects systems running Novell Client versions 4.91 SP 1 through SP 4 on Microsoft Windows 2000, XP, and Server 2003.
What are the implications of exploiting CVE-2007-5667?
Exploiting CVE-2007-5667 could allow an attacker to execute arbitrary code in kernel mode, potentially leading to system compromise.
When was CVE-2007-5667 disclosed?
CVE-2007-5667 was disclosed in 2007 and is associated with local privilege escalation vulnerabilities.