Novell ZENworks Configuration Management Bugs Let Remote Users Download Arbitrary Files and Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1026835 |
|
SecurityTracker URL: http://securitytracker.com/id/1026835
|
|
CVE Reference:
CVE-2011-3175, CVE-2011-3176
(Links to External Site)
|
Date: Mar 21 2012
|
Impact:
Disclosure of system information, Disclosure of user information, Execution of arbitrary code via network, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): ZCM 11.1
|
Description:
Several vulnerability was reported in Novell ZENworks Configuration Management. A remote user can execute arbitrary code on the target system. A remote user can view files on the target system.
A remote user can supply a specially crafted request (PreBoot Service Opcode 0x21) to view arbitrary files on the target system.
The vendor has assigned TID 7009969 to this vulnerability.
A remote user can send specially crafted data (PreBoot Service Opcode 0x4c and 0x6C) to trigger a stack overflow and execute arbitrary code on the target system. The code will run with the privileges of the target service.
The vendor has assigned TIDs 7009970 and 7009971 to this vulnerability.
Luigi Auriemma reported these vulnerabilities via iDefense.
|
Impact:
A remote user can execute arbitrary code on the target system.
A remote user can view files on the target system.
|
Solution:
The vendor has issued a fix.
The vendor's advisory is available at:
http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5127930.html
|
Vendor URL: support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5127930.html (Links to External Site)
|
Cause:
Access control error, Boundary error, Input validation error
|
Underlying OS:
Linux (SuSE), Windows (2003), Windows (2008)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Wed, 21 Mar 2012 22:09:53 +0000
Subject: Novell ZENworks Configuration Management
|
http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5127930.html
CVE-2011-3175
CVE-2011-3176
|
|
