var-200505-0878
Vulnerability from variot
Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENworks 6.5 Desktop and Server Management, ZENworks for Desktops 4.x, ZENworks for Servers 3.x, and Remote Management allows remote attackers to execute arbitrary code via (1) unspecified vectors, (2) type 1 authentication requests, and (3) type 2 authentication requests. Novell ZENworks is prone to multiple remote pre-authentication buffer overflow vulnerabilities. The issues exist in the 'zenrem32.exe' executable and may be exploited by a remote attacker to execute arbitrary code in the context of the affected service.
Bist Du interessiert an einem neuen Job in IT-Sicherheit?
Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secunia_vacancies/
TITLE: Novell ZENworks Remote Management Buffer Overflows
SECUNIA ADVISORY ID: SA15433
VERIFY ADVISORY: http://secunia.com/advisories/15433/
CRITICAL: Moderately critical
IMPACT: System access
WHERE:
From local network
SOFTWARE: Novell ZENworks Desktop Management 6.x http://secunia.com/product/4134/ Novell ZENworks for Desktops 4.x http://secunia.com/product/1246/ Novell ZENworks for Servers 3 http://secunia.com/product/1247/ Novell ZENworks Server Management 6.x http://secunia.com/product/5120/
DESCRIPTION: Alex Wheeler has reported some vulnerabilities in ZENworks products, which can be exploited by malicious people to compromise a vulnerable system. These can be exploited to cause heap-based and stack-based buffer overflows by sending some specially crafted traffic.
Successful exploitation allows execution of arbitrary code.
PROVIDED AND/OR DISCOVERED BY: Alex Wheeler
ORIGINAL ADVISORY: Alex Wheeler: http://www.rem0te.com/public/images/zen.pdf
Novell: http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097644.htm
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"affected_products": {
"_id": null,
"data": [
{
"_id": null,
"model": "zenworks server management",
"scope": "eq",
"trust": 1.9,
"vendor": "novell",
"version": "6.5"
},
{
"_id": null,
"model": "zenworks servers",
"scope": "eq",
"trust": 1.6,
"vendor": "novell",
"version": "3.2"
},
{
"_id": null,
"model": "zenworks",
"scope": "eq",
"trust": 1.6,
"vendor": "novell",
"version": "6.5"
},
{
"_id": null,
"model": "zenworks desktops",
"scope": "eq",
"trust": 1.6,
"vendor": "novell",
"version": "4.0.1"
},
{
"_id": null,
"model": "zenworks desktops",
"scope": "eq",
"trust": 1.6,
"vendor": "novell",
"version": "4.0"
},
{
"_id": null,
"model": "zenworks desktops",
"scope": "eq",
"trust": 1.6,
"vendor": "novell",
"version": "3.2"
},
{
"_id": null,
"model": "zenworks remote management",
"scope": "eq",
"trust": 1.0,
"vendor": "novell",
"version": "*"
},
{
"_id": null,
"model": "zenworks remote management",
"scope": null,
"trust": 0.9,
"vendor": "novell",
"version": null
},
{
"_id": null,
"model": "zenworks for servers",
"scope": "eq",
"trust": 0.3,
"vendor": "novell",
"version": "3.2"
},
{
"_id": null,
"model": "zenworks for desktops",
"scope": "eq",
"trust": 0.3,
"vendor": "novell",
"version": "4.0.1"
},
{
"_id": null,
"model": "zenworks for desktops",
"scope": "eq",
"trust": 0.3,
"vendor": "novell",
"version": "4.0"
},
{
"_id": null,
"model": "zenworks for desktops sp2",
"scope": "eq",
"trust": 0.3,
"vendor": "novell",
"version": "3.2"
},
{
"_id": null,
"model": "zenworks desktop management",
"scope": "eq",
"trust": 0.3,
"vendor": "novell",
"version": "6.5"
}
],
"sources": [
{
"db": "BID",
"id": "13678"
},
{
"db": "CNNVD",
"id": "CNNVD-200505-1199"
},
{
"db": "NVD",
"id": "CVE-2005-1543"
}
]
},
"credits": {
"_id": null,
"data": "Alex Wheeler",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200505-1199"
}
],
"trust": 0.6
},
"cve": "CVE-2005-1543",
"cvss": {
"_id": null,
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2005-1543",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 1.1,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2005-1543",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-200505-1199",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULMON",
"id": "CVE-2005-1543",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2005-1543"
},
{
"db": "CNNVD",
"id": "CNNVD-200505-1199"
},
{
"db": "NVD",
"id": "CVE-2005-1543"
}
]
},
"description": {
"_id": null,
"data": "Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENworks 6.5 Desktop and Server Management, ZENworks for Desktops 4.x, ZENworks for Servers 3.x, and Remote Management allows remote attackers to execute arbitrary code via (1) unspecified vectors, (2) type 1 authentication requests, and (3) type 2 authentication requests. Novell ZENworks is prone to multiple remote pre-authentication buffer overflow vulnerabilities. \nThe issues exist in the \u0027zenrem32.exe\u0027 executable and may be exploited by a remote attacker to execute arbitrary code in the context of the affected service. \n\n----------------------------------------------------------------------\n\nBist Du interessiert an einem neuen Job in IT-Sicherheit?\n\n\nSecunia hat zwei freie Stellen als Junior und Senior Spezialist in IT-\nSicherheit:\nhttp://secunia.com/secunia_vacancies/\n\n----------------------------------------------------------------------\n\nTITLE:\nNovell ZENworks Remote Management Buffer Overflows\n\nSECUNIA ADVISORY ID:\nSA15433\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/15433/\n\nCRITICAL:\nModerately critical\n\nIMPACT:\nSystem access\n\nWHERE:\n\u003eFrom local network\n\nSOFTWARE:\nNovell ZENworks Desktop Management 6.x\nhttp://secunia.com/product/4134/\nNovell ZENworks for Desktops 4.x\nhttp://secunia.com/product/1246/\nNovell ZENworks for Servers 3\nhttp://secunia.com/product/1247/\nNovell ZENworks Server Management 6.x\nhttp://secunia.com/product/5120/\n\nDESCRIPTION:\nAlex Wheeler has reported some vulnerabilities in ZENworks products,\nwhich can be exploited by malicious people to compromise a vulnerable\nsystem. These can be exploited to cause heap-based\nand stack-based buffer overflows by sending some specially crafted\ntraffic. \n\nSuccessful exploitation allows execution of arbitrary code. \n\nPROVIDED AND/OR DISCOVERED BY:\nAlex Wheeler\n\nORIGINAL ADVISORY:\nAlex Wheeler:\nhttp://www.rem0te.com/public/images/zen.pdf\n\nNovell:\nhttp://support.novell.com/cgi-bin/search/searchtid.cgi?/10097644.htm\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2005-1543"
},
{
"db": "BID",
"id": "13678"
},
{
"db": "VULMON",
"id": "CVE-2005-1543"
},
{
"db": "PACKETSTORM",
"id": "37674"
}
],
"trust": 1.35
},
"exploit_availability": {
"_id": null,
"data": [
{
"reference": "https://vulmon.com/exploitdetails?qidtp=exploitdb\u0026qid=16815",
"trust": 0.2,
"type": "exploit"
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2005-1543"
}
]
},
"external_ids": {
"_id": null,
"data": [
{
"db": "BID",
"id": "13678",
"trust": 2.0
},
{
"db": "NVD",
"id": "CVE-2005-1543",
"trust": 2.0
},
{
"db": "SECUNIA",
"id": "15433",
"trust": 1.8
},
{
"db": "VUPEN",
"id": "ADV-2005-0571",
"trust": 1.7
},
{
"db": "SECTRACK",
"id": "1014005",
"trust": 1.7
},
{
"db": "XF",
"id": "20645",
"trust": 0.6
},
{
"db": "XF",
"id": "2",
"trust": 0.6
},
{
"db": "XF",
"id": "20644",
"trust": 0.6
},
{
"db": "XF",
"id": "1",
"trust": 0.6
},
{
"db": "XF",
"id": "20639",
"trust": 0.6
},
{
"db": "BUGTRAQ",
"id": "20050518 NOVELL ZENWORKS MULTIPLE =?UTF-8?Q?REM=C3=98TE?= STACK \u0026 HEAP OVERFLOWS",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-200505-1199",
"trust": 0.6
},
{
"db": "EXPLOIT-DB",
"id": "16815",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2005-1543",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "37674",
"trust": 0.1
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2005-1543"
},
{
"db": "BID",
"id": "13678"
},
{
"db": "PACKETSTORM",
"id": "37674"
},
{
"db": "CNNVD",
"id": "CNNVD-200505-1199"
},
{
"db": "NVD",
"id": "CVE-2005-1543"
}
]
},
"id": "VAR-200505-0878",
"iot": {
"_id": null,
"data": true,
"sources": [
{
"db": "VARIoT devices database",
"id": null
}
],
"trust": 0.29166666
},
"last_update_date": "2024-11-23T20:20:52.804000Z",
"problemtype_data": {
"_id": null,
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2005-1543"
}
]
},
"references": {
"_id": null,
"data": [
{
"trust": 2.1,
"url": "http://www.rem0te.com/public/images/zen.pdf"
},
{
"trust": 2.1,
"url": "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097644.htm"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/13678"
},
{
"trust": 1.7,
"url": "http://securitytracker.com/id?1014005"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/15433"
},
{
"trust": 1.1,
"url": "http://www.vupen.com/english/advisories/2005/0571"
},
{
"trust": 1.1,
"url": "http://marc.info/?l=bugtraq\u0026m=111645317713662\u0026w=2"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20645"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20644"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/20639"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/20645"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/20644"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/20639"
},
{
"trust": 0.6,
"url": "http://www.frsirt.com/english/advisories/2005/0571"
},
{
"trust": 0.6,
"url": "http://marc.theaimsgroup.com/?l=bugtraq\u0026m=111645317713662\u0026w=2"
},
{
"trust": 0.3,
"url": "http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971493.htm"
},
{
"trust": 0.3,
"url": "/archive/1/400207"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/.html"
},
{
"trust": 0.1,
"url": "http://tools.cisco.com/security/center/viewalert.x?alertid=9241"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://www.exploit-db.com/exploits/16815/"
},
{
"trust": 0.1,
"url": "https://www.rapid7.com/db/modules/exploit/windows/novell/zenworks_desktop_agent"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/5120/"
},
{
"trust": 0.1,
"url": "http://secunia.com/secunia_security_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/1246/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/15433/"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/1247/"
},
{
"trust": 0.1,
"url": "http://secunia.com/secunia_vacancies/"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/4134/"
},
{
"trust": 0.1,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "http://secunia.com/about_secunia_advisories/"
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2005-1543"
},
{
"db": "BID",
"id": "13678"
},
{
"db": "PACKETSTORM",
"id": "37674"
},
{
"db": "CNNVD",
"id": "CNNVD-200505-1199"
},
{
"db": "NVD",
"id": "CVE-2005-1543"
}
]
},
"sources": {
"_id": null,
"data": [
{
"db": "VULMON",
"id": "CVE-2005-1543",
"ident": null
},
{
"db": "BID",
"id": "13678",
"ident": null
},
{
"db": "PACKETSTORM",
"id": "37674",
"ident": null
},
{
"db": "CNNVD",
"id": "CNNVD-200505-1199",
"ident": null
},
{
"db": "NVD",
"id": "CVE-2005-1543",
"ident": null
}
]
},
"sources_release_date": {
"_id": null,
"data": [
{
"date": "2005-05-25T00:00:00",
"db": "VULMON",
"id": "CVE-2005-1543",
"ident": null
},
{
"date": "2005-05-18T00:00:00",
"db": "BID",
"id": "13678",
"ident": null
},
{
"date": "2005-05-29T20:22:44",
"db": "PACKETSTORM",
"id": "37674",
"ident": null
},
{
"date": "2005-05-25T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200505-1199",
"ident": null
},
{
"date": "2005-05-25T04:00:00",
"db": "NVD",
"id": "CVE-2005-1543",
"ident": null
}
]
},
"sources_update_date": {
"_id": null,
"data": [
{
"date": "2017-07-11T00:00:00",
"db": "VULMON",
"id": "CVE-2005-1543",
"ident": null
},
{
"date": "2009-07-12T14:56:00",
"db": "BID",
"id": "13678",
"ident": null
},
{
"date": "2005-10-20T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200505-1199",
"ident": null
},
{
"date": "2024-11-20T23:57:34.230000",
"db": "NVD",
"id": "CVE-2005-1543",
"ident": null
}
]
},
"threat_type": {
"_id": null,
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200505-1199"
}
],
"trust": 0.6
},
"title": {
"_id": null,
"data": "Novell ZENworks Multiple remote overflow vulnerabilities",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200505-1199"
}
],
"trust": 0.6
},
"type": {
"_id": null,
"data": "buffer overflow",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200505-1199"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…