CVE-2013-1084: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the GetFle method in the umaninv service in Novell ZENworks Configuration Management ZCM 11.2.3 allows remote attackers to read arbitrary files via a .. dot dot in the Filename parameter in a GetFile action to zenworks-unmaninv/...

Novell ZENworks Configuration Management < 11.2.4 Multiple Vulnerabilities

The version of Novell ZENworks Configuration Management installed on the remote host can be tricked into disclosing any file readable by the Novell ZENworks umaninv service, and as such it is affected by multiple vulnerabilities : - A directory traversal vulnerability exists that allows any file...