← back
CVE-2010-4229

CVE-2010-4229

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 25%
exploitation probability
25%top 2% of all CVEs
observed exploitation
nono source reports it
Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management (ZAM) in Novell ZENworks Configuration Management 10.3 before 10.3.2, and 11, allows remote attackers to overwrite files, and subsequently execute arbitrary code, via directory traversal sequences in a filename field in an upload request.
Affected products
n/a · n/a
References
http://secunia.com/advisories/44120http://securityreason.com/securityalert/8207http://securitytracker.com/id?1025313https://exchange.xforce.ibmcloud.com/vulnerabilities/66656http://www.novell.com/support/viewContent.do?externalId=7007841http://www.securityfocus.com/archive/1/517425/100/0/threadedhttp://www.securityfocus.com/bid/47295http://www.vupen.com/english/advisories/2011/0917http://zerodayinitiative.com/advisories/ZDI-11-118/