4595Third-party advisory
http://securityreason.com/securityalert/4595 CVE-2008-5073
Novell ZENworks Desktop Management 6.5 - ActiveX Control 'CanUninstall()' Remote Buffer Overflow
Record summary
CVE-2008-5073 has a selected CVSS score of 9.3; EIP currently links 1 catalogued exploit.
Description
Heap-based buffer overflow in an ActiveX control in Novell ZENworks Desktop Management 6.5 allows remote attackers to execute arbitrary code via a long argument to the CanUninstall method.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBNovell ZENworks Desktop Management 6.5 - ActiveX Control 'CanUninstall()' Remote Buffer OverflowExploitDB exploitby Satan_HackerSNot analyzed1 file
References
520080927 Novell ZENWorks for Desktops Version 6.5 Remote (Heap-Based) PoCmailing list
http://www.securityfocus.com/archive/1/496786/100/0/threaded 31435vdb entry
http://www.securityfocus.com/bid/31435 novell-zenworks-activex-bo(45462)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/45462 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2008-5073