Summary
The host is installed with Novell NetIdentity Agent and is prone to remote code execution vulnerability.
Impact
Successful exploitation will let the attacker execute arbitrary code in the context of the affected application with system privileges through a valid IPC$ connection.
Impact Level: System
Solution
Upgrade to NetIdentity Client version 1.2.4
http://download.novell.com/Download?buildid=6ERQGPjRZ8o~
Insight
Handling of RPC messages over the XTIERRPCPIPE named pipe in 'xtagent.exe', and sending RPC messages that triggers the dereference of an arbitrary pointer which can cause remote code execution.
Affected
Novell NetIdentity Agent version prior to 1.2.4 on Windows.
References
Severity
Classification
-
CVE CVE-2009-1350 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities