Description
Buffer overflow in ZfHIPCND.exe in Novell ZENworks Handheld Management 7.0 allows remote attackers to execute arbitrary code via a crafted IP Conduit packet to TCP port 2400.
References
- zhm-zfhipcnd-bo(64930) vdb-entry
- 20110128 TELUS Security Labs VR - Novell ZENworks Handheld Management ZfHIPCND.exe Buffer Overflow mailing-list
- ADV-2011-0221 vdb-entry
- 70694 vdb-entry
- 43094 third-party-advisory
- 46024 vdb-entry
- http://www.novell.com/support/viewContent.do?externalId=7007663
- 1024993 vdb-entry
- http://telussecuritylabs.com/threats/show/FSC20110125-06
- http://www.zerodayinitiative.com/advisories/ZDI-11-026/