CVEブラウザに戻る

CVE-2010-4229

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0050%

EPSS Percentile26.44th

Published2011年4月18日

Last Modified2026年4月29日

Vulnerability Description

Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management (ZAM) in Novell ZENworks Configuration Management 10.3 before 10.3.2, and 11, allows remote attackers to overwrite files, and subsequently execute arbitrary code, via directory traversal sequences in a filename field in an upload request.

Affected Platforms (CPE)

📦

Novell

Zenworks Configuration Management

= 10.3

📦

Novell

Zenworks Configuration Management

= 10.3.1

📦

Novell

Zenworks Configuration Management

= 11

References & Advisories

🔗 http://secunia.com/advisories/44120

🔗 http://securityreason.com/securityalert/8207

🔗 http://securitytracker.com/id?1025313

🔗 http://www.novell.com/support/viewContent.do?externalId=7007841

🔗 http://www.securityfocus.com/archive/1/517425/100/0/threaded

🔗 http://www.securityfocus.com/bid/47295

🔗 http://www.vupen.com/english/advisories/2011/0917

🔗 http://zerodayinitiative.com/advisories/ZDI-11-118/

関連する脆弱性情報

CVE-2010-532410.0

Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management ...

CVE-2011-317510.0

Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote ...

CVE-2010-532310.0

Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management ...

CVE-2011-317610.0

Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote ...