exploits , vulnerabilities , articles , Novell Client for Windows NWFILTER.SYS Local Privilege Escalation Vulnerability

Title	Novell Client for Windows NWFILTER.SYS Local Privilege Escalation Vulnerability
Published	2007-11-13-12:00AM
Updated	2008-03-13-03:11AM
Class	Input Validation Error
CVE	CVE-2007-5667
Remote	No
Local	Yes
Credit	Stephen Fewer of Harmony Security discovered this issue.
Vulnerable	Novell Client 4.91 SP4 Novell Client 4.91 SP3 Novell Client 4.91 SP2 Microsoft Windows 2000 Professional SP4 Microsoft Windows 2000 Professional SP3 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 95 SR2 Microsoft Windows 95 Microsoft Windows 98 Microsoft Windows 98SE Microsoft Windows ME Microsoft Windows NT Workstation 4.0 SP6a Microsoft Windows NT Workstation 4.0 SP6 Microsoft Windows NT Workstation 4.0 SP5 Microsoft Windows NT Workstation 4.0 SP4 Microsoft Windows NT Workstation 4.0 SP3 Microsoft Windows NT Workstation 4.0 SP2 Microsoft Windows NT Workstation 4.0 SP1 Microsoft Windows NT Workstation 4.0 Microsoft Windows XP Home SP1 Microsoft Windows XP Home Microsoft Windows XP Professional SP1 Microsoft Windows XP Professional Novell Client 4.91 SP1a Novell Client 4.91 SP1 Novell Client 4.91
Not Vulnerable
Code	Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
TXT