Upload directory traversal in Novell ZenWorks Handheld Management 7.0.2

Luigi Auriemma Application: Novell ZenWorks Handheld Management http://www.novell.com/products/zenworks/handhelds/ Versions: = 7.0.2.61213 Platforms: Windows, Linux, NetWare Bug: upload directory traversal Exploitation: remote, versus server Date: 27 Jun 2011 found 25 Apr 2011 Author: Luigi...

Novell ZENworks Handheld Management ZfHIPCND.exe Buffer Overflow (CVE-2010-4299)

Novell ZENworks Handheld Management is part of the Novell ZENworks suite that allows administrators to remotely update, configure, and inventory handheld devices such as Palm, Windows CE, PocketPC, and RIM BlackBerry. A buffer overflow vulnerability has been reported in Novell ZENworks Handheld...

CVE-2011-0742

Buffer overflow in ZfHIPCND.exe in Novell ZENworks Handheld Management 7.0 allows remote attackers to execute arbitrary code via a crafted IP Conduit packet to TCP port 2400...

Buffer overflow

Buffer overflow in ZfHIPCND.exe in Novell ZENworks Handheld Management 7.0 allows remote attackers to execute arbitrary code via a crafted IP Conduit packet to TCP port 2400...

CVE-2011-0742

CVE-2011-0742 describes a buffer overflow in ZfHIPCND.exe of Novell ZENworks Handheld Management 7.0. A crafted IP Conduit packet sent to TCP port 2400 allows remote code execution. The affected component is the ZENworks Handheld Management Access Point process (ZfHIPCND.exe); root cause is a buf...

CVE-2011-0742

Buffer overflow in ZfHIPCND.exe in Novell ZENworks Handheld Management 7.0 allows remote attackers to execute arbitrary code via a crafted IP Conduit packet to TCP port 2400...

Novell ZENworks Handheld Management ZfHIPCND.exe Crafted TCP Request Remote Overflow

According to its build date, the version of the ZENworks Handheld Management Access Point process ZfHIPCND.exe on the remote host is affected by a buffer overflow vulnerability due to a failure to accommodate variable-sized data during initialization of a buffer. By default, this process listens ...

TELUS Security Labs VR - Novell ZENworks Handheld Management ZfHIPCND.exe Buffer Overflow

Novell ZENworks Handheld Management ZfHIPCND.exe Buffer Overflow TSL ID: FSC20110125-06 1. Affected Software Novell ZENworks Handheld Management 7.0 Reference: http://www.novell.com/products/zenworks/handhelds 2. Vulnerability Summary A buffer overflow vulnerability exists in Novell ZENworks...

Novell ZENworks Handheld Management buffer overflow

Buffer overflow on TCP/2400 traffic parsing...

Novell Zenworks Handheld Management ZfHIPCnd.exe Opcode 2 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Zenworks Handheld Management. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Access Point process ZfHIPCnd.exe which listens by default on...

Novell ZENworks Handheld Management 'ZfHIPCND.exe' Buffer Overflow Vulnerability

This host is installed with Novell ZENworks Handheld Management and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbnovellzhmbofvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Novell ZENworks Handheld Management 'ZfHIPCND.exe' Buffer Overflow Vulnerability Authors: Soora...

Novell ZENworks Handheld Management 'ZfHIPCND.exe' Buffer Overflow Vulnerability

Novell ZENworks Handheld Management is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Novell ZENworks Handheld Management Version Detection

Detects the installed version of Novell ZENworks Handheld Management on Windows. The script logs in via smb, searches for ZENworks Handheld Management Server in the registry and gets the version from the registry. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted...

Heap overflow

Heap-based buffer overflow in ZfHIPCND.exe in Novell Zenworks 7 Handheld Management ZHM allows remote attackers to execute arbitrary code via a crafted request to TCP port 2400...

Novell ZENworks Handheld Management ZfHIPCND.exe Unspecified Buffer Overflow

A vulnerability exists in the server ZfHIPCND.exe, which handles the data received on TCP port 2400. An attacker can overflow a buffer on a heap belonging to the server and possibly execute arbitrary code with SYSTEM privileges. Authentication is not required to exploit this vulnerability. C...

CVE-2010-4299

The CVE-2010-4299 vulnerability affects Novell ZENworks Handheld Management: the ZfHIPCND.exe service is prone to a heap-based buffer overflow triggered by crafted TCP port 2400 requests, enabling remote code execution. Exploitation details (e.g., specific offsets, affected versions, or whether e...

Novell ZENworks Handheld Management ZfHIPCND.exe Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell ZENworks Handheld Management. Authentication is not required to exploit this vulnerability. The specific flaw exists within module ZfHIPCND.exe. This process is responsible for handling the...

HTC handheld PCs directory traversal

Bluetoth stack OBEX FTP directory traversal...

Mobile viruses hampered by lack of dominant mobile OS

Malware that attacks mobile phones and other handheld devices has been the Next Big Threat for most of the last decade. And much like the Year of PKI, it’s never really materialized. Security experts have postulated that this is mainly because there’s not enough valuable data on these devices to...

CVE-2005-4771

The CVE-2005-4771 entry concerns the Trust Digital Trusted Mobility Suite’s Trusted Mobility Agent PC Policy. A cancel button at the domain-authentication prompt bypasses policy checks, allowing local users to sync a handheld (PDA) device despite a policy setting that sync is unauthorized. The av...