CVE-2018-7687

Client for OES Elevation of Privilege via Buffer Overflow

State: Published
Severity: 7.8 High
Published: May 21, 2018
Updated: Sep 16, 2024
Reserved: Mar 5, 2018

Description

The Micro Focus Client for OES before version 2 SP4 IR8a has a vulnerability that could allow a local attacker to elevate privileges via a buffer overflow in ncfsd.sys.

Scores

CVSS	Score	Vector	Source
3.0	7.8 High	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	microfocus

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Client for Open Enterprise ServerMicro Focus	2 SP4 (IR8a) to before 2 SP4 (IR8a)Affected

References

https://www.novell.com/support/kb/doc.php?id=7022983
https://bugzilla.novell.com/show_bug.cgi?id=1093607

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.