CVE-2012-2215
Novell ZENworks Configuration Management 11.1-11.1a - Unauthenticated Path Traversal via Preboot Service Opcode 0x21
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-2215.
PoCs published by Luigi Auriemma, juan vazquez, Stephen Fewer, juan vazquez, including Metasploit module auxiliary/scanner/misc/zenworks_preboot_fileaccess.
AI-analyzed exploit summary This Metasploit module exploits a directory traversal vulnerability in Novell ZENworks Configuration Management Preboot Service via a crafted PROXY_CMD_FTP_FILE packet. It allows remote file access by sending a specially crafted packet to port 998/TCP.
Description
Directory traversal vulnerability in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers to read arbitrary files via an opcode 0x21 request.
Exploits (2)
This Metasploit module exploits a directory traversal vulnerability in Novell ZENworks Configuration Management Preboot Service via a crafted PROXY_CMD_FTP_FILE packet. It allows remote file access by sending a specially crafted packet to port 998/TCP.
This Metasploit module exploits a buffer overflow in Novell ZENworks Configuration Management Preboot Service via opcode 0x21 (PROXY_CMD_FTP_FILE) on port 998/TCP. It uses a ROP chain to bypass DEP and achieve remote code execution.