|
|
| |
Credit:
The original article can be found at: http://www.securityfocus.com/bid/47295
The information has been provided by AbdulAziz Hariri.
|
| |
Vulnerable Systems:
* Novell ZENworks Configuration Management 10.1.2 a
* Novell ZENworks Configuration Management 10.1.2
* Novell ZENworks Configuration Management 10.3.1
* Novell ZENworks Configuration Management 10.3
* Novell ZENworks Configuration Management 10.1
Non-Vulnerable Systems:
* Novell ZENworks Configuration Management 10.3.2
An attacker can exploit this issue to execute arbitrary code in the context of the 'ZenWorks' user. Successful attacks will completely compromise the affected computer. Failed attacks will likely cause denial-of-service conditions.
Vendor Status:
Novell as issued an update for this vulnerablity.
Patch Availability:
http://www.novell.com/support/kb/doc.php?id=7009901
CVE Information:
CVE-2010-4229
Disclosure Timeline:
Intial Release Apr 08 2011
|
|
|