Back to CVE Browser

CVE-2010-4229

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0050%

EPSS Percentile26.44th

PublishedApr 18, 2011

Last ModifiedApr 29, 2026

Vulnerability Description

Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management (ZAM) in Novell ZENworks Configuration Management 10.3 before 10.3.2, and 11, allows remote attackers to overwrite files, and subsequently execute arbitrary code, via directory traversal sequences in a filename field in an upload request.

Affected Platforms (CPE)

📦

Novell

Zenworks Configuration Management

= 10.3

📦

Novell

Zenworks Configuration Management

= 10.3.1

📦

Novell

Zenworks Configuration Management

= 11

References & Advisories

🔗 http://secunia.com/advisories/44120

🔗 http://securityreason.com/securityalert/8207

🔗 http://securitytracker.com/id?1025313

🔗 http://www.novell.com/support/viewContent.do?externalId=7007841

🔗 http://www.securityfocus.com/archive/1/517425/100/0/threaded

🔗 http://www.securityfocus.com/bid/47295

🔗 http://www.vupen.com/english/advisories/2011/0917

🔗 http://zerodayinitiative.com/advisories/ZDI-11-118/

Related Vulnerabilities

CVE-2010-532410.0

Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management ...

CVE-2011-317510.0

Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote ...

CVE-2010-532310.0

Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management ...

CVE-2011-317610.0

Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote ...