CVE-2018-7687 – Client for OES Elevation of Privilege via Buffer Overflow

https://notcve.org/view.php?id=CVE-2018-7687

The Micro Focus Client for OES before version 2 SP4 IR8a has a vulnerability that could allow a local attacker to elevate privileges via a buffer overflow in ncfsd.sys. Micro Focus Client for OES, en versiones anteriores a la 2 SP4 IR8a, tiene una vulnerabilidad que podría permitir que un atacante local eleve sus privilegios mediante un desbordamiento de búfer en ncfsd.sys. This vulnerability allows local attackers to escalate privileges on vulnerable installations of Micro Focus Client for Open Enterprise Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of IOCTL 0x143CFB. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a buffer. • https://bugzilla.novell.com/show_bug.cgi?id=1093607 https://www.novell.com/support/kb/doc.php?id=7022983 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •