ID CVE-2006-6299
Summary Integer overflow in Msg.dll in Novell ZENworks 7 Asset Management (ZAM) before SP1 IR11 and the Collection client allows remote attackers to execute arbitrary code via crafted packets, which trigger a heap-based buffer overflow.
References
Vulnerable Configurations
  • cpe:2.3:a:novell:zenworks_asset_management:7:sp1:*:*:*:*:*:*
    cpe:2.3:a:novell:zenworks_asset_management:7:sp1:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 29-07-2017 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid
  • 21395
  • 21400
confirm http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974824.htm
idefense
  • 20061201 Novell ZENworks Asset Management Collection Client Heap Overflow Vulnerability
  • 20061201 Novell ZENworks Asset Management Msg.dll Heap Overflow Vulnerability
sectrack 1017326
secunia 23157
vupen ADV-2006-4829
xf zenworks-assetmanagement-collection-bo(30665)
Last major update 29-07-2017 - 01:29
Published 05-12-2006 - 11:28
Last modified 29-07-2017 - 01:29
Back to Top