CVE-2013-3956: novell client

EPSS trend

Probability

7.80%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 7.80% on 19-09-2026

19-09-202619-10-2026

EPSS score

7.80%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

4 found

referenceUnverified
Exploit Reference (pastebin.com)
Maturity: unknown
exploit-databaselocalwindowsVerified
Novell Client 2 SP3 - 'nicm.sys 3.1.11.0' Local Privilege Escalation
Maturity: weaponized
exploit-databaselocalwindows_x86Verified
Novell Client 2 SP3 - 'nicm.sys' Local Privilege Escalation (Metasploit)
Maturity: weaponized

Show all 4 exploits

MetasploitremoteUnverified
Novell Client 2 SP3 nicm.sys Local Privilege Escalation
exploit/windows/local/novell_client_nicm
Maturity: poc

References

4 links

pastebin.com/GB4iiEwRX Refsource MISCExploit
www.exploit-db.com/exploits/26452ExploitX Refsource EXPLOIT DB
www.exploit-db.com/exploits/27191ExploitX Refsource EXPLOIT DB
www.novell.com/support/kb/doc.php?id=7012497X Refsource CONFIRMVendor Advisory

Related vulnerabilities

CVE-2013-3697novellclient0.49%13y ago31-07-2013 10:00Integer overflow in the NWFS.SYS kernel driver 4.91.5.8 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003 and the NCPL.SYS kernel driver in Novell Client 2 SP2 on Windows Vista and Windows Server 2008 and Novell Client 2 SP3 on Windows Server 2008 R2, Windows 7, Windows 8, and Windows Server 2012 might allow local users to gain privileges via a crafted 0x1439EB IOCTL call.CVE-2013-3705novellclient0.34%12y ago22-12-2013 15:00The VBA32 AntiRootKit component for Novell Client 2 SP3 before IR5 on Windows allows local users to cause a denial of service (bugcheck and BSOD) via an IOCTL call for an invalid IOCTL.CVE-2007-2954novellclient23.19%19y ago31-08-2007 22:00Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2 through SP4 for Windows allow remote attackers to execute arbitrary code via certain long arguments to the (1) RpcAddPrinterDriver, (2) RpcGetPrinterDriverDirectory, and other unspecified RPC requests, aka Novell bug 300870, a different vulnerability than CVE-2006-5854.CVE-2007-0108novellclient1.23%19y ago09-01-2007 00:00nwgina.dll in Novell Client 4.91 SP3 for Windows 2000/XP/2003 does not delete user profiles during a Terminal Service or Citrix session, which allows remote authenticated users to invoke alternate user profiles.CVE-2007-5667novellclient0.37%18y ago14-11-2007 01:00NWFILTER.SYS in Novell Client 4.91 SP 1 through SP 4 for Windows 2000, XP, and Server 2003 makes the \.\nwfilter device available for arbitrary user-mode input via METHOD_NEITHER IOCTLs, which allows local users to gain privileges by passing a kernel address as an argument and overwriting kernel memory locations.CVE-2007-6701novellclient7.17%18y ago13-02-2008 20:00Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP4 for Windows allow remote attackers to execute arbitrary code via long arguments to multiple unspecified RPC functions, aka Novell bug 287919, a different vulnerability than CVE-2007-2954.

All vulnerabilities inclient

CVE-2013-3956: novell client

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References