Novell ZENworks Remote Management Password Security Bypass Vulnerability

Bugtraq ID:	42175
Class:	Configuration Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 03 2010 12:00AM
Updated:	Aug 09 2010 09:04PM
Credit:	TippingPoint ZDI
Vulnerable:	Novell ZENworks Server Management 7.ZSM7 SP1 Novell ZENworks for Servers 3.0.2 Novell ZENworks for Desktops 4.0.1 Novell ZENworks for Desktops 4.0 Novell ZENworks Desktop Management 7.ZDM7 SP1
Not Vulnerable:

Novell ZENworks Remote Management Password Security Bypass Vulnerability

Novell ZENworks is prone to a security-bypass vulnerability.

A successful exploit may allow the attacker to bypass certain security restrictions and perform unauthorized actions.

The following applications are vulnerable:

Novell ZENworks for Servers 3.0.2
Novell ZENworks for Desktops 4
Novell ZENworks for Desktops 4.0.1
Novell ZENworks Server Management 7.ZSM7 SP1
Novell ZENworks Desktop Management 7.ZDM7 SP1

Novell ZENworks Remote Management Password Security Bypass Vulnerability

Attackers can exploit this issue using readily available tools.

Novell ZENworks Remote Management Password Security Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Novell ZENworks Remote Management Password Security Bypass Vulnerability

References:

• 7006557 - Remote Management password authentication (Novell)
  
• ZENworks Product Page (Novell)
  
• ZDI-10-145: Novell ZENWorks Remote Management Agent Weak Authentication Remote (ZDI Disclosures )
  
• ZDI-10-145 Novell ZENWorks Remote Management Agent Weak Authentication Remote Co (Zero Day Initiative)