CVE-2007-5761

high

Description

The NantSys device 5.0.0.115 in Motorola netOctopus 5.1.2 build 1011 has weak permissions for the \\.\NantSys device interface (nantsys.sys), which allows local users to gain privileges or cause a denial of service (system crash), as demonstrated by modifying the SYSENTER_EIP_MSR CPU Model Specific Register (MSR) value.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/39503

http://www.vupen.com/english/advisories/2008/0062

http://www.securityfocus.com/bid/27175

http://www.netopia.com/support/software/technotes/netoctopus/Removing_the_nantsys_Driver.pdf

http://securitytracker.com/id?1019161

http://secunia.com/advisories/28366

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=636

Details

Source: Mitre, NVD

Published: 2008-01-09

Updated: 2017-07-29

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High