Novell ZENworks Configuration Management TFTPD Remote Code Execution Vulnerability
BID:46434
Info
Novell ZENworks Configuration Management TFTPD Remote Code Execution Vulnerability
| Bugtraq ID: | 46434 |
| Class: | Unknown |
| CVE: |
CVE-2010-4323 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 15 2011 12:00AM |
| Updated: | Feb 18 2011 05:39PM |
| Credit: | Francis Provencher from Protech Research Lab, AbdulAziz Hariri of ThirdEyeTesters, and SilentSignal through Tipping Point |
| Vulnerable: |
Novell ZENworks Configuration Management 10.1.2 a Novell ZENworks Configuration Management 10.1.2 Novell ZENworks Configuration Management 11 Novell ZENworks Configuration Management 10.3.2 Novell ZENworks Configuration Management 10.3.1 Novell ZENworks Configuration Management 10.3 Novell ZENworks Configuration Management 10.1 |
| Not Vulnerable: | |
Discussion
Novell ZENworks Configuration Management TFTPD Remote Code Execution Vulnerability
Novell ZENworks Configuration Management is prone to a remote code-execution vulnerability due to a heap-based buffer overflow that affects the TFTPD service.
An attacker can exploit this issue to execute arbitrary code in the context of the 'ZenWorks' user. Successful attacks will completely compromise the affected computer. Failed attacks will likely cause denial-of-service conditions.
ZENworks Configuration Management 10 and 11 are vulnerable.
Novell ZENworks Configuration Management is prone to a remote code-execution vulnerability due to a heap-based buffer overflow that affects the TFTPD service.
An attacker can exploit this issue to execute arbitrary code in the context of the 'ZenWorks' user. Successful attacks will completely compromise the affected computer. Failed attacks will likely cause denial-of-service conditions.
ZENworks Configuration Management 10 and 11 are vulnerable.
Exploit / POC
Novell ZENworks Configuration Management TFTPD Remote Code Execution Vulnerability
The following proof-of-concept code is available:
The following proof-of-concept code is available:
Solution / Fix
Novell ZENworks Configuration Management TFTPD Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Novell ZENworks Configuration Management TFTPD Remote Code Execution Vulnerability
References:
References:
- ZENworks Product Page (Novell)
- ZDI-11-089: Novell ZenWorks TFTPD Remote Code Execution Vulnerability (ZDI Disclosures
- 7007896 ZCM TFTPD Remote Code Execution Security Vulnerability (Novell)
- ZCM 10.3.1 TFTP vulnerability (Novell)
- ZCM 10.3.2 TFTP vulnerability (Novell)
- ZCM 11.0 TFTP vulnerability (Novell)
- ZDI-11-089 Novell ZenWorks TFTPD Remote Code Execution Vulnerability (Zero Day Initiative)