Lucene search

K
cve[email protected]CVE-2013-1092
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-1092

2022-10-0316:14:47
web.nvd.nist.gov
17
cve-2013-1092
novell
zenworks desktop management
windows
vulnerability
local users
privileges
trojan horse
unquoted path
nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.0%

Multiple unquoted Windows search path vulnerabilities in Novell ZENworks Desktop Management (ZDM) 7 through 7.1 might allow local users to gain privileges via a Trojan horse “program” file in the C: folder, related to an attempted launch of (1) ZenRem32.exe or (2) wm.exe.

Affected configurations

NVD
Node
novellzenworks_desktop_managementMatch7
OR
novellzenworks_desktop_managementMatch7.1

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.0%

Related for CVE-2013-1092