Description
Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENworks 6.5 Desktop and Server Management, ZENworks for Desktops 4.x, ZENworks for Servers 3.x, and Remote Management allows remote attackers to execute arbitrary code via (1) unspecified vectors, (2) type 1 authentication requests, and (3) type 2 authentication requests.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
Novell ZENworks 6.5 Desktop/Server Management Overflow
exploit/windows/novell/zenworks_desktop_agent
Exploit-DB 2
- Novell ZENworks 6.5 - Desktop/Server Management Overflow (Metasploit) EDB-16815 · remote · Jul 25, 2010 · verified
- Novell ZENworks 6.5 - Desktop/Server Management Remote Stack Overflow (Metasploit) EDB-1150 · remote · Aug 12, 2005 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- http://www.rem0te.com/public/images/zen.pdf
- 13678 vdb-entry
- novell-zenwork-remote-management-bo(20639) vdb-entry
- 1014005 vdb-entry
- ADV-2005-0571 vdb-entry
- 20050518 NOVELL ZENWORKS MULTIPLE =?utf-8?Q?REM=C3=98TE?= STACK & HEAP OVERFLOWS mailing-list
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097644.htm
- novell-zenwork-remote-management-2-bo(20645) vdb-entry
- 15433 third-party-advisory
- novell-zenwork-remote-management-1-bo(20644) vdb-entry