Novell ZENworks Remote Diagnostics Console One Unauthorized Access Vulnerability
BID:15540
Info
Novell ZENworks Remote Diagnostics Console One Unauthorized Access Vulnerability
| Bugtraq ID: | 15540 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 23 2005 12:00AM |
| Updated: | Nov 23 2005 12:00AM |
| Credit: | Reported by the vendor. |
| Vulnerable: |
Novell ZENworks Remote Management Novell ZENworks for Servers 3.0.2 Novell ZENworks for Desktops 4.0.1 Novell ZENworks Desktop Management 6.5 |
| Not Vulnerable: |
Novell ZENworks for Servers 3.0.2 IR4 |
Discussion
Novell ZENworks Remote Diagnostics Console One Unauthorized Access Vulnerability
Novell ZENworks Remote Diagnostics is prone to an unauthorized access vulnerability.
This vulnerability may facilitate disclosure of sensitive data and may aid in other attacks against a vulnerable computer.
Novell ZENworks Remote Diagnostics is prone to an unauthorized access vulnerability.
This vulnerability may facilitate disclosure of sensitive data and may aid in other attacks against a vulnerable computer.
Exploit / POC
Novell ZENworks Remote Diagnostics Console One Unauthorized Access Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
Novell ZENworks Remote Diagnostics Console One Unauthorized Access Vulnerability
Solution:
Novell has released Technical Information Documents TID2972567 and TID10098818 to address this issue. ZENworks for Servers 3.0.2 IR4 is not affected by this issue. Please see the referenced advisory for more information.
Solution:
Novell has released Technical Information Documents TID2972567 and TID10098818 to address this issue. ZENworks for Servers 3.0.2 IR4 is not affected by this issue. Please see the referenced advisory for more information.
References
Novell ZENworks Remote Diagnostics Console One Unauthorized Access Vulnerability
References:
References: