CVE-2018-7687
Client for OES Elevation of Privilege via Buffer Overflow
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
The Micro Focus Client for OES before version 2 SP4 IR8a has a vulnerability that could allow a local attacker to elevate privileges via a buffer overflow in ncfsd.sys.
Micro Focus Client for OES, en versiones anteriores a la 2 SP4 IR8a, tiene una vulnerabilidad que podría permitir que un atacante local eleve sus privilegios mediante un desbordamiento de búfer en ncfsd.sys.
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Micro Focus Client for Open Enterprise Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the handling of IOCTL 0x143CFB. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a buffer. An attacker can leverage this vulnerability to escalate privilege to the level of SYSTEM.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2018-03-05 CVE Reserved
- 2018-05-21 CVE Published
- 2023-03-08 EPSS Updated
- 2024-09-16 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://bugzilla.novell.com/show_bug.cgi?id=1093607 | X_refsource_misc | |
| https://www.novell.com/support/kb/doc.php?id=7022983 | X_refsource_misc |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Microfocus Search vendor "Microfocus" | Client Search vendor "Microfocus" for product "Client" | <= 2.0 Search vendor "Microfocus" for product "Client" and version " <= 2.0" | open_enterprise_server |
Affected
| ||||||
| Microfocus Search vendor "Microfocus" | Client Search vendor "Microfocus" for product "Client" | 2.0 Search vendor "Microfocus" for product "Client" and version "2.0" | sp3, open_enterprise_server |
Affected
| ||||||