CVE-2011-3175

Novell Zenworks Configuration Management - Memory Corruption

Title source: rule

Description

Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to execute arbitrary code via an opcode 0x6c request.

Exploits (3)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/19958

View Code ZIP pw:eip

exploitdb WORKING POC

rubyremotewindows

https://www.exploit-db.com/exploits/19959

View Code ZIP pw:eip

metasploit WORKING POC NORMAL

by Luigi Auriemma, juan vazquez · rubypoc

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/novell/zenworks_preboot_op6c_bof.rb

View Code ZIP pw:eip

References (5)

[Various Sources] http://download.novell.com/Download?buildid=rs4B5jhWKf8~

[Vendor Advisory] http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5127930.html

[Vendor Advisory] http://www.novell.com/support/viewContent.do?externalId=7010044

[Various Sources] http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=973

[Exploit, Third Party Advisory] http://www.exploit-db.com/exploits/19958

Scores

EPSS 0.7622

EPSS Percentile 98.9%

Details

CWE

CWE-119

Status published

Products (2)

novell/zenworks_configuration_management 11.1

novell/zenworks_configuration_management 11.1a

Published Apr 09, 2012

Tracked Since Feb 18, 2026