CVE-2005-3786 - Novell ZENworks for Desktops 4.0.1, ZENworks for Servers 3.0.2, and ZENworks 6.5 Desktop Management

CVE-2005-3786

Summary

Novell ZENworks for Desktops 4.0.1, ZENworks for Servers 3.0.2, and ZENworks 6.5 Desktop Management does not restrict access to Remote Diagnostics, which allows local users to bypass security policies by using Console One.

References

Vulnerable Configurations

cpe:2.3:a:novell:zenworks:6.5:*:*:*:*:*:*:*
cpe:2.3:a:novell:zenworks:6.5:*:*:*:*:*:*:*
cpe:2.3:a:novell:zenworks_desktops:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:novell:zenworks_desktops:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:novell:zenworks_servers:3.0.2:*:*:*:*:*:*:*
cpe:2.3:a:novell:zenworks_servers:3.0.2:*:*:*:*:*:*:*

CVSS

Base:	4.6 (as of 08-03-2011 - 02:27)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	15540
confirm	http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098818.htm
sectrack	1015260
secunia	17700
vupen	ADV-2005-2544

Last major update

08-03-2011 - 02:27

Published

23-11-2005 - 23:03

Last modified

08-03-2011 - 02:27