Check Point Advisories

Novell NeaatIdentity RPC Pointer Dereference Code Execution - Ver2 (CVE-2009-1350)

Check Point Reference:	CPAI-2014-0851
Date Published:	3 Feb 2014
Severity:	Critical
Last Updated:	Wednesday 01 January, 2014
Source:	CVE-2009-1350
Protection Provided by:
Who is Vulnerable?
Vulnerability Description	A code execution vulnerability has been reported in Novell Client NetIdentity Agent. The vulnerability is due to insufficient sanity check when processing crafted RPC messages. A remote attacker could exploit this vulnerability by sending a specially crafted RPC message to the affected service. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.