CVEブラウザに戻る

CVE-2010-5323

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1330%

EPSS Percentile11.53th

Published2015年6月7日

Last Modified2026年5月6日

Vulnerability Description

Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to execute arbitrary code via a crafted WAR pathname in the filename parameter in conjunction with WAR content in the POST data, a different vulnerability than CVE-2010-5324.

Affected Platforms (CPE)

📦

Novell

Zenworks Configuration Management

= 10.0

📦

Novell

Zenworks Configuration Management

= 10.1

📦

Novell

Zenworks Configuration Management

= 10.2

References & Advisories

🔗 http://www.exploit-db.com/exploits/16784/

🔗 http://www.zerodayinitiative.com/advisories/ZDI-10-078/

🔗 https://bugzilla.novell.com/show_bug.cgi?id=578911

🔗 https://www.novell.com/support/kb/doc.php?id=7005573

🔗 http://www.exploit-db.com/exploits/16784/

🔗 http://www.zerodayinitiative.com/advisories/ZDI-10-078/

🔗 https://bugzilla.novell.com/show_bug.cgi?id=578911

🔗 https://www.novell.com/support/kb/doc.php?id=7005573

関連する脆弱性情報

CVE-2010-532410.0

Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management ...

CVE-2011-317510.0

Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote ...

CVE-2010-422910.0

Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management (ZAM) in Novel...

CVE-2011-317610.0

Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote ...