Novell ZENworks Desktop Management 'tftpd' Component Buffer Overflow Vulnerability

Bugtraq ID:	45378
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 13 2010 12:00AM
Updated:	Dec 13 2010 12:00AM
Credit:	Francis Provencher for Protek Research Lab.
Vulnerable:	Novell ZENworks Desktop Management 7 SP1
Not Vulnerable:

Novell ZENworks Desktop Management 'tftpd' Component Buffer Overflow Vulnerability

Novell ZENworks Desktop Management is prone to a stack-based buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied input.

An attacker can exploit this issue to execute arbitrary code in the context of the application. Failed attacks will likely cause denial-of-service conditions.

ZENworks Desktop Management 7 SP1 is vulnerable.

Novell ZENworks Desktop Management 'tftpd' Component Buffer Overflow Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Novell ZENworks Desktop Management 'tftpd' Component Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.

Novell ZENworks Desktop Management 'tftpd' Component Buffer Overflow Vulnerability

References:

• ZENworks Product Page (Novell)
  
• Security Vulnerability with ZDML7 Imaging Remote Code Execution (Novell)