CVE-2010-4323

2011-02-1901:00:01

CWE-119

[email protected]

web.nvd.nist.gov

cve-2010-4323

buffer overflow

novell zenworks configuration manager

nvd

security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

Low

0.954 High

EPSS

Percentile

99.4%

JSON

Heap-based buffer overflow in novell-tftp.exe in Novell ZENworks Configuration Manager (ZCM) 10.3.1, 10.3.2, and 11.0, and earlier versions, allows remote attackers to execute arbitrary code via a long TFTP request.

Affected configurations

NVD

Node

novellzenworks_configuration_managerRange≤11.0

novellzenworks_configuration_managerMatch10.3.1

novellzenworks_configuration_managerMatch10.3.2

CPENameOperatorVersion
novell:zenworks_configuration_managernovell zenworks configuration managerle11.0
novell:zenworks_configuration_managernovell zenworks configuration managereq10.3.1
novell:zenworks_configuration_managernovell zenworks configuration managereq10.3.2

CPE	Name	Operator	Version
novell:zenworks_configuration_manager	novell zenworks configuration manager	le	11.0
novell:zenworks_configuration_manager	novell zenworks configuration manager	eq	10.3.1
novell:zenworks_configuration_manager	novell zenworks configuration manager	eq	10.3.2