Novell ZENworks Configuration Management Multiple Unspecified Vulnerabilities
BID:36266
Info
Novell ZENworks Configuration Management Multiple Unspecified Vulnerabilities
| Bugtraq ID: | 36266 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 03 2009 12:00AM |
| Updated: | Sep 04 2009 04:01PM |
| Credit: | Intevydis |
| Vulnerable: |
Novell ZENworks Configuration Management 10.1.2 a Novell ZENworks Configuration Management 10.1.2 Novell ZENworks Configuration Management 10.1 |
| Not Vulnerable: | |
Discussion
Novell ZENworks Configuration Management Multiple Unspecified Vulnerabilities
Novell ZENworks Configuration Management is prone to multiple remote vulnerabilities.
Very few technical details are currently available. We will update this BID as more information emerges.
An attacker can leverage these issues to execute arbitrary code within the context of the vulnerable application and obtain potentially sensitive information.
ZENworks Configuration Management 10.1 through 10.1.2a are vulnerable; other versions may also be affected.
Novell ZENworks Configuration Management is prone to multiple remote vulnerabilities.
Very few technical details are currently available. We will update this BID as more information emerges.
An attacker can leverage these issues to execute arbitrary code within the context of the vulnerable application and obtain potentially sensitive information.
ZENworks Configuration Management 10.1 through 10.1.2a are vulnerable; other versions may also be affected.
Exploit / POC
Novell ZENworks Configuration Management Multiple Unspecified Vulnerabilities
A working commercial exploit is available through Intevydis. This exploit is not otherwise publicly available or known to be circulating in the wild.
A working commercial exploit is available through Intevydis. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
Novell ZENworks Configuration Management Multiple Unspecified Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Novell ZENworks Configuration Management Multiple Unspecified Vulnerabilities
References:
References:
- VulnDisco Pack Professional (Intevydis)
- ZENworks Configuration Management Homepage (Novell)