Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-4229

Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management (ZAM) in Novell ZENworks Configuration Management 10.3 before 10.3.2, and 11, allows remote attackers to overwrite files, and subsequently execute arbitrary code, via directory traversal sequences in a filename field in an upload request.

Published

2011-04-18T18:55:00.797

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

10.0

Impact Score

10.0

Weaknesses

Type: Primary
CWE-22

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	novell	zenworks_configuration_management	10.3	Yes
Application	novell	zenworks_configuration_management	10.3.1	Yes
Application	novell	zenworks_configuration_management	11	Yes

References

http://secunia.com/advisories/44120 Vendor Advisory ([email protected])
http://securityreason.com/securityalert/8207 ([email protected])
http://securitytracker.com/id?1025313 ([email protected])
http://www.novell.com/support/viewContent.do?externalId=7007841 Vendor Advisory ([email protected])
http://www.securityfocus.com/archive/1/517425/100/0/threaded ([email protected])
http://www.securityfocus.com/bid/47295 ([email protected])
http://www.vupen.com/english/advisories/2011/0917 Vendor Advisory ([email protected])
http://zerodayinitiative.com/advisories/ZDI-11-118/ ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/66656 ([email protected])
http://secunia.com/advisories/44120 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://securityreason.com/securityalert/8207 (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1025313 (af854a3a-2127-422b-91ae-364da2661108)
http://www.novell.com/support/viewContent.do?externalId=7007841 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/517425/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/47295 (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2011/0917 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://zerodayinitiative.com/advisories/ZDI-11-118/ (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/66656 (af854a3a-2127-422b-91ae-364da2661108)