CVE-2011-3176

Novell Zenworks Configuration Management - Memory Corruption

Title source: rule

Description

Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to execute arbitrary code via an opcode 0x4c request.

Exploits (3)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/19958

View Code ZIP pw:eip

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/19959

View Code ZIP pw:eip

metasploit WORKING POC NORMAL

by Luigi Auriemma, juan vazquez · rubypoc

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/novell/zenworks_preboot_op4c_bof.rb

View Code ZIP pw:eip

References (5)

[Vendor Advisory] http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5127930.html

[Various Sources] http://download.novell.com/Download?buildid=rs4B5jhWKf8~

[Vendor Advisory] http://www.novell.com/support/viewContent.do?externalId=7010044

[Various Sources] http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=974

[Exploit, Third Party Advisory] http://www.exploit-db.com/exploits/19959

Scores

EPSS 0.8360

EPSS Percentile 99.3%

Details

CWE

CWE-119

Status published

Products (2)

novell/zenworks_configuration_management 11.1

novell/zenworks_configuration_management 11.1a

Published Apr 09, 2012

Tracked Since Feb 18, 2026