CVE-2010-4323
Novell ZENworks Configuration Manager < 11.0 - Remote Code Execution via Long TFTP Request
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-4323. PoCs published by Francis Provencher.
AI-analyzed exploit summary This Perl script exploits a buffer overflow vulnerability in a TFTP server by sending a maliciously crafted UDP packet. The exploit targets CVE-2010-4323, which affects certain TFTP server implementations, potentially leading to a denial-of-service (DoS) or remote code execution (RCE).
Description
Heap-based buffer overflow in novell-tftp.exe in Novell ZENworks Configuration Manager (ZCM) 10.3.1, 10.3.2, and 11.0, and earlier versions, allows remote attackers to execute arbitrary code via a long TFTP request.
Exploits (1)
This Perl script exploits a buffer overflow vulnerability in a TFTP server by sending a maliciously crafted UDP packet. The exploit targets CVE-2010-4323, which affects certain TFTP server implementations, potentially leading to a denial-of-service (DoS) or remote code execution (RCE).