CVE-2013-3956
Last modified
CVE-2013-3956 is a vulnerability of currently unknown severity. The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2 on Windows Vista and Windows Server 2008; and Novell Client 2 SP3 on Windows Server 2008 R2, Windows 7, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted 0x143B6B IOCTL call.. EPSS estimates a 7.80% chance of exploitation in the next 30 days.
Description
The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2 on Windows Vista and Windows Server 2008; and Novell Client 2 SP3 on Windows Server 2008 R2, Windows 7, Windows 8, and Windows Server 2012 allows local users to gain privileges via a crafted 0x143B6B IOCTL call.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Novell | Client | 4.91 | Sp5 |
| Novell | Client | 2.0 | Sp2 |
References
- http://pastebin.com/GB4iiEwRExploit
- http://www.novell.com/support/kb/doc.php?id=7012497Vendor Advisory
- http://pastebin.com/GB4iiEwRExploit
- http://www.novell.com/support/kb/doc.php?id=7012497Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-3956?
How severe is CVE-2013-3956?
How do I fix CVE-2013-3956?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-3950Stack-based buffer overflow in the openSharedCacheFile funct…
- CVE-2013-3951sys/openbsd/stack_protector.c in libc in Apple iOS 6.1.3 and…
- CVE-2013-3952The fill_pipeinfo function in bsd/kern/sys_pipe.c in the XNU…
- CVE-2013-3953The mach_port_space_info function in osfmk/ipc/mach_debug.c …
- CVE-2013-3954The posix_spawn system call in the XNU kernel in Apple Mac O…
- CVE-2013-3955The get_xattrinfo function in the XNU kernel in Apple iOS 5.…
- CVE-2013-3957SQL injection vulnerability in the login screen in the Web N…
- CVE-2013-3958The login implementation in the Web Navigator in Siemens Win…
- CVE-2013-3959The Web Navigator in Siemens WinCC before 7.2 Update 1, as u…
- CVE-2013-3960Easytime Studio Easy File Manager 1.1 has a HTTP request sec…9.9
- CVE-2013-3961SQL injection vulnerability in edit_event.php in Simple PHP …
- CVE-2013-3962Cross-site scripting (XSS) vulnerability in Grandstream GXV3…
Are you affected by CVE-2013-3956?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST