46 matches found
CVE-2012-2223: Exposure of Sensitive Information to an Unauthorized Actor
The xplat agent in Novell ZENworks Configuration Management ZCM 10.3.x before 10.3.4 and 11.x before 11.2 enables the HTTP TRACE method, which might make it easier for remote attackers to conduct cross-site tracing XST attacks via unspecified vectors...
CVE-2012-2215
CVE-2012-2215 describes a directory traversal in the ZENworks Configuration Management Preboot Service (12.x files reference show Preboot opcode 0x21) that allows remote read of arbitrary files. The public details indicate the vulnerability exists in ZCM 11.1 and 11.1a, with exploitation via an o...
CVE-2011-3175: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management ZCM 11.1 and 11.1a allows remote attackers to execute arbitrary code via an opcode 0x6c request...
Novell ZENworks Configuration Management Preboot Service Opcode 4c Vulnerability
Added: 03/28/2012 CVE: CVE-2011-3176 BID: 52659 OSVDB: 80231 Background Novell ZENworks Configuration Management is an IT desktop computer management suite that provides the ability to install, configure and administer desktop computers from a centralized location. The product is based on a...
Novell ZENworks Configuration Management Preboot Service Opcode 4c Vulnerability
Added: 03/28/2012 CVE: CVE-2011-3176 BID: 52659 OSVDB: 80231 Background Novell ZENworks Configuration Management is an IT desktop computer management suite that provides the ability to install, configure and administer desktop computers from a centralized location. The product is based on a...
Novell ZENworks Configuration Management < 10 SP3 Multiple Flaws
ZENworks Configuration Management, a configuration management software from Novell, is installed on the remote Windows host. According to its version, it is affected by several vulnerabilities : - An unspecified vulnerability in ZCM Preboot Service may allow an attacker to execute arbitrary code ...