Novell ZENworks Handheld Management 'ZfHIPCND.exe' Buffer Overflow Vulnerability

Novell ZENworks Handheld Management is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Novell ZENworks Handheld Management Version Detection

Detects the installed version of Novell ZENworks Handheld Management on Windows. The script logs in via smb, searches for ZENworks Handheld Management Server in the registry and gets the version from the registry. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted...

Heap overflow

Heap-based buffer overflow in ZfHIPCND.exe in Novell Zenworks 7 Handheld Management ZHM allows remote attackers to execute arbitrary code via a crafted request to TCP port 2400...

Novell ZENworks Handheld Management ZfHIPCND.exe Unspecified Buffer Overflow

A vulnerability exists in the server ZfHIPCND.exe, which handles the data received on TCP port 2400. An attacker can overflow a buffer on a heap belonging to the server and possibly execute arbitrary code with SYSTEM privileges. Authentication is not required to exploit this vulnerability. C...

CVE-2010-4299

The CVE-2010-4299 vulnerability affects Novell ZENworks Handheld Management: the ZfHIPCND.exe service is prone to a heap-based buffer overflow triggered by crafted TCP port 2400 requests, enabling remote code execution. Exploitation details (e.g., specific offsets, affected versions, or whether e...

CVE-2010-4299: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in ZfHIPCND.exe in Novell Zenworks 7 Handheld Management ZHM allows remote attackers to execute arbitrary code via a crafted request to TCP port 2400...

Novell ZENworks Handheld Management ZfHIPCND.exe Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell ZENworks Handheld Management. Authentication is not required to exploit this vulnerability. The specific flaw exists within module ZfHIPCND.exe. This process is responsible for handling the...

HTC handheld PCs directory traversal

Bluetoth stack OBEX FTP directory traversal...

Mobile viruses hampered by lack of dominant mobile OS

Malware that attacks mobile phones and other handheld devices has been the Next Big Threat for most of the last decade. And much like the Year of PKI, it’s never really materialized. Security experts have postulated that this is mainly because there’s not enough valuable data on these devices to...

CVE-2005-4771

The CVE-2005-4771 entry concerns the Trust Digital Trusted Mobility Suite’s Trusted Mobility Agent PC Policy. A cancel button at the domain-authentication prompt bypasses policy checks, allowing local users to sync a handheld (PDA) device despite a policy setting that sync is unauthorized. The av...

CVE-2005-2343

Research in Motion RIM BlackBerry Handheld web browser for BlackBerry Handheld before 4.0.2 allows remote attackers to cause a denial of service hang via a Java Application Description JAD file with a long application name and vendor string, which prevents a browser dialog from being properly...

CVE-2005-2343: Undefined Security Weakness

Research in Motion RIM BlackBerry Handheld web browser for BlackBerry Handheld before 4.0.2 allows remote attackers to cause a denial of service hang via a Java Application Description JAD file with a long application name and vendor string, which prevents a browser dialog from being properly...

CVE-2005-4771

Trusted Mobility Agent PC Policy in Trust Digital Trusted Mobility Suite provides a cancel button that bypasses the domain-authentication prompt, which allows local users to sync a handheld PDA device despite a policy setting that sync is unauthorized...

Research in Motion (RIM) BlackBerry Handheld web browser does not properly handle Java Application Description (JAD) files

Overview The Research in Motion RIM BlackBerry Handheld web browser is vulnerable to a denial of service via a specially crafted Java Application Description JAD file. Description The BlackBerry Handheld web browser does not properly handle malformed JAD files. JAD files in J2ME are used to...