Novell ZENworks Handheld Management 'ZfHIPCND.exe' Buffer Overflow Vulnerability

Bugtraq ID:	44700
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 07 2010 12:00AM
Updated:	Nov 07 2010 12:00AM
Credit:	Anonymous via Zero Day Initiative
Vulnerable:	Novell ZENworks Handheld Management 7 SP1
Not Vulnerable:

Novell ZENworks Handheld Management 'ZfHIPCND.exe' Buffer Overflow Vulnerability

Novell ZENworks Handheld Management is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied data.

An attacker can leverage this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will compromise the affected application. Failed exploit attempts will result in a denial-of-service condition.

Novell ZENworks Handheld Management 7 SP1 is vulnerable.

Novell ZENworks Handheld Management 'ZfHIPCND.exe' Buffer Overflow Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

Novell ZENworks Handheld Management 'ZfHIPCND.exe' Buffer Overflow Vulnerability

Solution:
The vendor has released an interim patch in the form of a Field Test File (FTF). Please see the vendor advisory for more information.

Novell ZENworks Handheld Management 'ZfHIPCND.exe' Buffer Overflow Vulnerability

References:

• Novell ZENworks Handheld Management Homepage (Novell)
  
• Novell ZENworks Handheld Management ZfHIPCND.exe Remote Code Execution Vulnerabi (TippingPoint)
  
• ZENworks 7 Handheld Management SP1 buffer overflow (Novell)