Novell ZENworks Asset Management 7.5 Remote File Access

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Novell ZENworks Asset Management 7.5 Remote File Access', 'Description' = %q This module exploits a hardcoded user and password for the GetFile...

SUSE CVE-2011-2653

Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management ZAM 7.5 allows remote attackers to execute arbitrary code by uploading an executable file...

The vulnerability of the doPost method in the Rtrlet class of the ZENworks Configuration Management information system allows a perpetrator to load and execute arbitrary files.

The vulnerability of the GetReRequestData method in the GetStoredResult class of the ZENworks Configuration Management information system is related to the failure to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands using...

The vulnerability of the doPost method in the Rtrlet class of the ZENworks Configuration Management information system allows a perpetrator to load and execute arbitrary files.

The vulnerability of the doPost method in the Rtrlet class of the ZENworks Configuration Management software lies in the deficiencies in path name restriction. Exploiting this vulnerability allows a malicious actor to download and execute arbitrary files using unspecified vectors...

CVE-2015-0781: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the doPost method of the Rtrlet class in Novell ZENworks Configuration Management ZCM allows remote attackers to upload and execute arbitrary files via unspecified vectors...

Novell ZENworks Session ID Disclosure Vulnerability

Novell ZENworks is a suite of software that supports automated IT management and business process management across resources within an organization. A security vulnerability in the Rtrlet.class class of Novell ZENworks allows remote attackers to submit a special POST request to obtain sensitive...

Novell ZENworks 'doPost' Method Remote Code Execution Vulnerability

Novell ZENworks is a suite of software that supports automated IT management and business process management across resources within an organization. The 'doPost' method in the Rtrlet class of Novell ZENworks fails to adequately filter the path of an uploaded file, allowing remote attackers to...

Novell Zenworks Rtrlet doPost Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Zenworks. By default, authentication is not required to exploit this vulnerability. The specific flaw exists within the doPost method of the Rtrlet class. The issue lies in the failure to...

PT-2015-3296

Name of the Vulnerable Software and Affected Versions Novell ZENworks Configuration Management affected versions not specified Description The issue is related to a directory traversal vulnerability in the doPost method of the Rtrlet class. This vulnerability allows remote attackers to upload and...

CVE-2012-4933: Undefined Security Weakness

The rtrlet web application in the Web Console in Novell ZENworks Asset Management ZAM 7.5 uses a hard-coded username of Ivanhoe and a hard-coded password of Scott for the 1 GetFilePassword and 2 GetConfigInfoPassword operations, which allows remote attackers to obtain sensitive information via a...

PT-2012-5667

Name of the Vulnerable Software and Affected Versions Novell ZENworks Asset Management ZAM version 7.5 Description The issue concerns the rtrlet web application in the Web Console, where a hard-coded username and password are used for certain operations. Specifically, the GetFile Password and...

CVE-2011-2653: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management ZAM 7.5 allows remote attackers to execute arbitrary code by uploading an executable file...

PT-2011-4002

Name of the Vulnerable Software and Affected Versions Novell ZENworks Asset Management version 7.5 Description The issue allows remote attackers to execute arbitrary code by uploading an executable file due to a directory traversal vulnerability in the rtrlet component. Recommendations For Novell...

Novell ZENworks Asset Management Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Zenworks Asset Management. Authentication is not required to exploit this vulnerability. The flaw exists within the rtrlet component. This process listens on TCP port 8080. When handling an...