Novell ZENworks Configuration Management TFTPD Remote Code Execution Vulnerability
Publish Date: 21 Juli 2015
Schweregrad:: Hoch
CVE Kennungen:: CVE-2010-4323
Hinweisdatum: 21 Juli 2015
Beschreibung
Heap-based buffer overflow in novell-tftp.exe in Novell ZENworks Configuration Manager (ZCM) 10.3.1, 10.3.2, and 11.0, and earlier versions, allows remote attackers to execute arbitrary code via a long TFTP request.
Trend Micro Lösungen
Apply associated Trend Micro DPI Rules.
Lösungen
Trend Micro Deep Security DPI Rule Number: 1004603
Trend Micro Deep Security DPI Rule Name: 1004603 - Novell ZENworks TFTPD Remote Code Execution Vulnerability
Betroffene Software und Version:
- novell zenworks_configuration_manager 10.3.1
- novell zenworks_configuration_manager 10.3.2
- novell zenworks_configuration_manager 11.0