CVE-2011-3175

2012-04-0920:55:01

CWE-119

[email protected]

web.nvd.nist.gov

cve

2011

3175

buffer overflow

novell zenworks

configuration management

nvd

vulnerability

remote code execution

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

Low

0.971 High

EPSS

Percentile

99.8%

JSON

Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to execute arbitrary code via an opcode 0x6c request.

Affected configurations

NVD

Node

novellzenworks_configuration_managementMatch11.1

novellzenworks_configuration_managementMatch11.1a

CPENameOperatorVersion
novell:zenworks_configuration_managementnovell zenworks configuration managementeq11.1
novell:zenworks_configuration_managementnovell zenworks configuration managementeq11.1a

CPE	Name	Operator	Version
novell:zenworks_configuration_management	novell zenworks configuration management	eq	11.1
novell:zenworks_configuration_management	novell zenworks configuration management	eq	11.1a