Novell ZENworks Mobile Management CVE-2013-1082 Local File Include Vulnerability
BID:60179
Info
Novell ZENworks Mobile Management CVE-2013-1082 Local File Include Vulnerability
| Bugtraq ID: | 60179 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-1082 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 07 2013 12:00AM |
| Updated: | May 30 2013 09:44AM |
| Credit: | Andrea Micalizzi |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Novell ZENworks Mobile Management CVE-2013-1082 Local File Include Vulnerability
Novell ZENworks Mobile Management is prone to a local file include vulnerability because it fails to adequately validate user-supplied input.
An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts. This could allow the attacker to compromise the application and the computer; other attacks are also possible.
Novell ZENworks Mobile Management 2.6.0, 2.6.1 and 2.7.0 are vulnerable.
Note: This issue was previously discussed in BID 58402, but has been given its own record to better document it.
Novell ZENworks Mobile Management is prone to a local file include vulnerability because it fails to adequately validate user-supplied input.
An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts. This could allow the attacker to compromise the application and the computer; other attacks are also possible.
Novell ZENworks Mobile Management 2.6.0, 2.6.1 and 2.7.0 are vulnerable.
Note: This issue was previously discussed in BID 58402, but has been given its own record to better document it.
Exploit / POC
Novell ZENworks Mobile Management CVE-2013-1082 Local File Include Vulnerability
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
Novell ZENworks Mobile Management CVE-2013-1082 Local File Include Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Novell ZENworks Mobile Management CVE-2013-1082 Local File Include Vulnerability
References:
References: