Novell ZENworks Configuration Management 'DoFindReplace()' Method Buffer Overflow Vulnerability

Bugtraq ID:	50576
Class:	Boundary Condition Error
CVE:	CVE-2011-3174
Remote:	Yes
Local:	No
Published:	Nov 07 2011 12:00AM
Updated:	Nov 07 2011 12:00AM
Credit:	Andrea Micalizzi
Vulnerable:	Novell ZENworks Configuration Management 11.1 Novell ZENworks Configuration Management 10.3 Novell ZENworks Configuration Management 10.2
Not Vulnerable:

Novell ZENworks Configuration Management 'DoFindReplace()' Method Buffer Overflow Vulnerability

Novell ZENworks Configuration Management is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied data.

An attacker can exploit this issue to execute arbitrary code in the context of an application using the ActiveX control (typically Internet Explorer). Failed attacks will likely cause denial-of-service conditions.

Novell ZENworks Configuration Management 'DoFindReplace()' Method Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Novell ZENworks Configuration Management 'DoFindReplace()' Method Buffer Overflow Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

Novell ZENworks Configuration Management 'DoFindReplace()' Method Buffer Overflow Vulnerability

References:

• ZENworks Configuration Management Homepage (Novell)
  
• Novell ZENWorks Software Packaging ISGrid.Grid2.1 DoFindReplace bstrReplaceText (Andrea Micalizzi)
  
• Security Vulnerabilities with ZENworks Admin Studio version (Andrea Micalizzi )