Back to CVE Browser

CVE-2010-5323

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1330%

EPSS Percentile11.53th

PublishedJun 7, 2015

Last ModifiedMay 6, 2026

Vulnerability Description

Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to execute arbitrary code via a crafted WAR pathname in the filename parameter in conjunction with WAR content in the POST data, a different vulnerability than CVE-2010-5324.

Affected Platforms (CPE)

📦

Novell

Zenworks Configuration Management

= 10.0

📦

Novell

Zenworks Configuration Management

= 10.1

📦

Novell

Zenworks Configuration Management

= 10.2

References & Advisories

🔗 http://www.exploit-db.com/exploits/16784/

🔗 http://www.zerodayinitiative.com/advisories/ZDI-10-078/

🔗 https://bugzilla.novell.com/show_bug.cgi?id=578911

🔗 https://www.novell.com/support/kb/doc.php?id=7005573

🔗 http://www.exploit-db.com/exploits/16784/

🔗 http://www.zerodayinitiative.com/advisories/ZDI-10-078/

🔗 https://bugzilla.novell.com/show_bug.cgi?id=578911

🔗 https://www.novell.com/support/kb/doc.php?id=7005573

Related Vulnerabilities

CVE-2010-532410.0

Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management ...

CVE-2011-317510.0

Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote ...

CVE-2010-422910.0

Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management (ZAM) in Novel...

CVE-2011-317610.0

Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote ...