ID CVE-2005-1543
Summary Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENworks 6.5 Desktop and Server Management, ZENworks for Desktops 4.x, ZENworks for Servers 3.x, and Remote Management allows remote attackers to execute arbitrary code via (1) unspecified vectors, (2) type 1 authentication requests, and (3) type 2 authentication requests.
References
Vulnerable Configurations
  • cpe:2.3:a:novell:zenworks:6.5:*:*:*:*:*:*:*
    cpe:2.3:a:novell:zenworks:6.5:*:*:*:*:*:*:*
  • cpe:2.3:a:novell:zenworks_desktops:3.2:sp2:*:*:*:*:*:*
    cpe:2.3:a:novell:zenworks_desktops:3.2:sp2:*:*:*:*:*:*
  • cpe:2.3:a:novell:zenworks_desktops:4.0:*:*:*:*:*:*:*
    cpe:2.3:a:novell:zenworks_desktops:4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:novell:zenworks_desktops:4.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:novell:zenworks_desktops:4.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:novell:zenworks_remote_management:*:*:*:*:*:*:*:*
    cpe:2.3:a:novell:zenworks_remote_management:*:*:*:*:*:*:*:*
  • cpe:2.3:a:novell:zenworks_server_management:6.5:*:*:*:*:*:*:*
    cpe:2.3:a:novell:zenworks_server_management:6.5:*:*:*:*:*:*:*
  • cpe:2.3:a:novell:zenworks_servers:3.2:*:*:*:*:*:*:*
    cpe:2.3:a:novell:zenworks_servers:3.2:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 11-07-2017 - 01:32)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 13678
bugtraq 20050518 NOVELL ZENWORKS MULTIPLE =?utf-8?Q?REM=C3=98TE?= STACK & HEAP OVERFLOWS
confirm http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097644.htm
misc http://www.rem0te.com/public/images/zen.pdf
sectrack 1014005
secunia 15433
vupen ADV-2005-0571
xf
  • novell-zenwork-remote-management-1-bo(20644)
  • novell-zenwork-remote-management-2-bo(20645)
  • novell-zenwork-remote-management-bo(20639)
saint via4
bid 13678
description Novell ZENworks Remote Management authentication buffer overflow
id misc_zenworks
osvdb 16698
title zenworks_remote_management_auth
type remote
Last major update 11-07-2017 - 01:32
Published 25-05-2005 - 04:00
Last modified 11-07-2017 - 01:32
Back to Top