CVE-2007-2923

Published: Jun 18, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The launch method in the LocalExec ActiveX control (LocalExec.ocx) in Novell exteNd Director 4.1 and Portal Services allows remote attackers to execute arbitrary commands.

Affected (1)

Products: Novell: Extend Director

Novell

1 product

Extend Director

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Novell Extend Director	Version 4.1

References (18)

http://osvdb.org/37318

Source: cret@cert.org

http://secunia.com/advisories/25710

Source: cret@cert.org

http://www.kb.cert.org/vuls/id/793433

Source: cret@cert.org

US Government Resource

http://www.novell.com/documentation/nedse41/readmesp2.txt

Source: cret@cert.org

http://www.securityfocus.com/bid/24493

Source: cret@cert.org

ExploitPatch

http://www.securitytracker.com/id?1018258

Source: cret@cert.org

http://www.vupen.com/english/advisories/2007/2235

Source: cret@cert.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34898

Source: cret@cert.org

https://secure-support.novell.com/KanisaPlatform/Publishing/360/3169416_f.SAL_Public.html

Source: cret@cert.org

http://osvdb.org/37318