CVE-2011-2657
Novell ZENworks Configuration Management 10.2-11 SP1 - Remote Code Execution via LaunchHelp ActiveX Path Traversal
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-2657.
PoCs published by Metasploit, rgod, juan vazquez, including Metasploit module exploits/windows/browser/zenworks_helplauncher_exec.
AI-analyzed exploit summary This Metasploit module exploits a vulnerability in AdminStudio LaunchHelp.dll ActiveX control (CVE-2011-2657) by leveraging the LaunchProcess function to execute arbitrary commands. It delivers a payload via a VBS stager and achieves remote code execution on vulnerable systems.
Description
Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in LaunchHelp.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 allows remote attackers to execute arbitrary commands via a pathname in the first argument.
Exploits (2)
This Metasploit module exploits a vulnerability in AdminStudio LaunchHelp.dll ActiveX control (CVE-2011-2657) by leveraging the LaunchProcess function to execute arbitrary commands. It delivers a payload via a VBS stager and achieves remote code execution on vulnerable systems.
This Metasploit module exploits CVE-2011-2657 in AdminStudio LaunchHelp.dll ActiveX control, allowing arbitrary command execution via the LaunchProcess function. It delivers a payload through a VBS stager and achieves remote code execution on vulnerable systems.