← back
CVE-2010-4323

CVE-2010-4323

EPSS 8.1%
Heap-based buffer overflow in novell-tftp.exe in Novell ZENworks Configuration Manager (ZCM) 10.3.1, 10.3.2, and 11.0, and earlier versions, allows remote attackers to execute arbitrary code via a long TFTP request.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/16191unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/43379http://securityreason.com/securityalert/8092http://securityreason.com/securityalert/8094https://exchange.xforce.ibmcloud.com/vulnerabilities/65438http://www.novell.com/support/viewContent.do?externalId=7007896http://www.securityfocus.com/archive/1/516524/100/0/threadedhttp://www.securityfocus.com/bid/46434http://www.securitytracker.com/id?1025092http://www.vupen.com/english/advisories/2011/0425http://www.zerodayinitiative.com/advisories/ZDI-11-089