Novell ZENworks Desktop Management Installation Service Remote Information Disclosure Vulnerability

This vulnerability allows remote attackers to impersonate valid users in vulnerable installations of Novell ZENworks Desktop Management. Authentication is not required to exploit this vulnerability. The specific flaw exists due to an information leak when querying the AWSI service which listens b...

Novell ZENworks 6.5 Desktop/Server Management Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Novell...

Novell ZENworks Remote Management Buffer Overflow (CVE-2005-1543)

ZENworks is a resource management solution developed by Novell. The product provides system administrators the capability of remote management of networked computers. The software is divided into two major components, the management server and the management agent. The central management server...

Novell ZENworks Patch Management Multiple SQL Injection Vulnerabilities (CVE-2005-3315)

ZENworks is a resource management solution developed by Novell. The product provides system administrators with management capabilities of remote networked computers. The software suite is composed of several product components. Some of the available ZENworks product components are ZENworks Deskt...

ZENworks Remote Management Agent Detection

The remote host is running ZENworks Remote Management Agent. This program allows a system to be managed remotely by an administrator. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid36088; scriptversion"1.10";...

CVE-2008-5073

Heap-based buffer overflow in an ActiveX control in Novell ZENworks Desktop Management 6.5 allows remote attackers to execute arbitrary code via a long argument to the CanUninstall method...

Heap overflow

Heap-based buffer overflow in an ActiveX control in Novell ZENworks Desktop Management 6.5 allows remote attackers to execute arbitrary code via a long argument to the CanUninstall method...

CVE-2008-5073

Novell ZENworks Desktop Management 6.5 includes an ActiveX control (AxNalServer.dll) with a heap-based buffer overflow in the CanUninstall method due to insufficient boundary checking. A remote attacker can trigger code execution by supplying a long argument, via a malicious web page that a user ...

CVE-2008-5073

Heap-based buffer overflow in an ActiveX control in Novell ZENworks Desktop Management 6.5 allows remote attackers to execute arbitrary code via a long argument to the CanUninstall method...

CVE-2008-5073: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in an ActiveX control in Novell ZENworks Desktop Management 6.5 allows remote attackers to execute arbitrary code via a long argument to the CanUninstall method...

Novell ZENWorks for Desktops Version 6.5 Remote (Heap-Based) PoC

tested on IE 6 and IE 7 IE 8 Beta1 is up to urself :P worked well but no shell ! cuz its just a PoC stupid u may do some research and put the shell in the hell, anyway, have fun ------------------------------------ [email protected] ------------------------------------ html head titleNovell...

Novell ZenWorks ActiveX buffer overflow

CanUninstall method buffer overflow...

Novell ZENworks Desktop Management 6.5 - ActiveX Control CanUninstall() Remote Buffer Overflow

Novell ZENworks Desktop Management 6.5 - ActiveX Control CanUninstall Remote Buffer Overflow source: https://www.securityfocus.com/bid/31435/info Novell ZENworks Desktop Management ActiveX control is prone to a buffer-overflow vulnerability because the application fails to adequately check...

Novell ZENworks Desktop Management 6.5 - ActiveX Control 'CanUninstall()' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/31435/info Novell ZENworks Desktop Management ActiveX control is prone to a buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied input. An attacker can exploit this issue to execute arbitrary code in...

ZENworks 6.5 Desktop/Server Management Remote Stack Overflow

No description provided by source. package Msf::Exploit::zenworksdesktopagent; use strict; use base "Msf::Exploit"; use Pex::Text; my $advanced = ; my $info = 'Name' = 'ZENworks 6.5 Desktop/Server Management Remote Stack Overflow', 'Version' = '$Revision: 1.1 $', 'Authors' = 'Anonymous', , 'Arch'...

Code injection

PatchLink Update client for Unix, as used by Novell ZENworks Patch Management Update Agent for Linux/Unix/Mac LUM 6.2094 through 6.4102 and other products, allows local users to 1 truncate arbitrary files via a symlink attack on the /tmp/patchlink.tmp file used by the logtrimmer script, and 2...

CVE-2008-0525

PatchLink Update client for Unix, as used by Novell ZENworks Patch Management Update Agent for Linux/Unix/Mac LUM 6.2094 through 6.4102 and other products, allows local users to 1 truncate arbitrary files via a symlink attack on the /tmp/patchlink.tmp file used by the logtrimmer script, and 2...

CVE-2008-0525: Improper Link Resolution Before File Access

PatchLink Update client for Unix, as used by Novell ZENworks Patch Management Update Agent for Linux/Unix/Mac LUM 6.2094 through 6.4102 and other products, allows local users to 1 truncate arbitrary files via a symlink attack on the /tmp/patchlink.tmp file used by the logtrimmer script, and 2...

Directory traversal

STEngine.exe 3.5.0.20 in Novell ZENworks Endpoint Security Management ESM 3.5, and other ESM versions before 3.5.0.82, dynamically creates scripts in a world-writable directory when generating diagnostic reports, which allows local users to gain privileges, as demonstrated by creating a cmd.exe...

CVE-2007-5665

STEngine.exe 3.5.0.20 in Novell ZENworks Endpoint Security Management ESM 3.5, and other ESM versions before 3.5.0.82, dynamically creates scripts in a world-writable directory when generating diagnostic reports, which allows local users to gain privileges, as demonstrated by creating a cmd.exe...