Multiple Vendor BIOS Keyboard Buffer Password Persistence Weakness (2)

No description provided by source. source: http://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on the operating system running o...

Novell ZENworks Configuration Management PreBoot Directory Traversal (CVE-2013-3706)

A directory traversal vulnerability has been reported in Novell ZENworks Configuration Manager. The vulnerability is due to the preboot service which supports an opcode that allows files to be downloaded through directory traversal. A remote attacker can exploit this vulnerability to disclose the...

Novell ZENworks Configuration Management PreBoot Service Information Disclosure Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell ZENworks Configuration Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Preboot Service novell-pbserv.exe which listens for incoming...

CVE-2013-3706

Directory traversal vulnerability in the PreBoot service in Novell ZENworks Configuration Management ZCM 11.2 allows remote attackers to read arbitrary files via a .. dot dot in a preboot update pathname, aka ZDI-CAN-1595...

Directory traversal

Directory traversal vulnerability in the PreBoot service in Novell ZENworks Configuration Management ZCM 11.2 allows remote attackers to read arbitrary files via a .. dot dot in a preboot update pathname, aka ZDI-CAN-1595...

EUVD-2013-3639

Directory traversal vulnerability in the PreBoot service in Novell ZENworks Configuration Management ZCM 11.2 allows remote attackers to read arbitrary files via a .. dot dot in a preboot update pathname, aka ZDI-CAN-1595...

CVE-2013-3706: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the PreBoot service in Novell ZENworks Configuration Management ZCM 11.2 allows remote attackers to read arbitrary files via a .. dot dot in a preboot update pathname, aka ZDI-CAN-1595...

PT-2014-2702

Name of the Vulnerable Software and Affected Versions Novell ZENworks Configuration Management version 11.2 Description The issue allows remote attackers to read arbitrary files via a .. dot dot in a preboot update pathname. This is a directory traversal vulnerability in the PreBoot service...

Novell ZENworks Configuration Management目录遍历漏洞

BUGTRAQ ID: 65912 CVECAN ID: CVE-2013-3706 Novell ZENworks Configuration Management是ZENworks系统网关工具中的配置管理解决方案。 Novell ZENworks Configuration Management 11.2版本的PreBoot服务相关输入没有被正确验证即用于读取文件，这可使恶意用户通过目录遍历序列泄露任意文件的内容。 0 Novell ZENworks Configuration Management 11.2 厂商补丁： Novell ------...

Novell ZENworks Configuration Management Preboot Service 0x4c Buffer Overflow

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...

Novell ZENworks Configuration Management Preboot Service - 0x4c Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Novell ZENworks Configuration...

Novell ZENworks Configuration Management Preboot Service - 0x6c Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Novell ZENworks Configuration...

Novell ZENworks Configuration Management Preboot Service 0x4c Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Novell ZENworks Configuration...

Novell ZENworks Configuration Management Preboot Service 0x6c Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Novell ZENworks Configuration...

Novell ZENworks Configuration Management Preboot Service Remote File Access

This module exploits a directory traversal in the ZENworks Configuration Management. The vulnerability exists in the Preboot service and can be triggered by sending a specially crafted PROXYCMDFTPFILE opcode 0x21 packet to the 998/TCP port. This module has been successfully tested on Novell...

Novell ZENworks Configuration Management PreBoot Service Buffer Overflow

A stack buffer overflow vulnerability has been reported in Novell ZENworks Configuration Management...

Novell ZENworks Configuration Management PreBoot Service Opcode Request Parsing Vulnerabilities

According to its version, the instance of ZENworks Configuration Management installed on the remote Windows host has several vulnerabilities in its PreBoot service : - An arbitrary file download vulnerability via opcode 0x21 may allow an attacker to download any file on the remote system. TID...

PT-2012-3888

Name of the Vulnerable Software and Affected Versions Novell ZENworks Configuration Management ZCM versions 11.1 through 11.1a Description A directory traversal issue in the Preboot Service allows remote attackers to read arbitrary files by sending an opcode 0x21 request. Recommendations For...

CVE-2011-3176: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management ZCM 11.1 and 11.1a allows remote attackers to execute arbitrary code via an opcode 0x4c request...

PT-2012-1678

Name of the Vulnerable Software and Affected Versions Novell ZENworks Configuration Management ZCM versions 11.1 and 11.1a Description A stack-based buffer overflow issue exists in the Preboot Service of the affected software, allowing remote attackers to execute arbitrary code via an opcode 0x4c...