PT-2005-4537 · Novell · Novell Zenworks For Desktops+3

Publicado 2005-11-23 · Atualizado 2011-03-08 · CVE-2005-3786

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Novell ZENworks for Desktops version 4.0.1 Novell ZENworks for Servers version 3.0.2 Novell ZENworks 6.5 Desktop Management (affected versions not specified)

Description The issue allows local users to bypass security policies by utilizing Console One due to unrestricted access to Remote Diagnostics.

Recommendations For Novell ZENworks for Desktops version 4.0.1, restrict access to Remote Diagnostics to prevent local users from bypassing security policies. For Novell ZENworks for Servers version 3.0.2, restrict access to Remote Diagnostics to prevent local users from bypassing security policies. For Novell ZENworks 6.5 Desktop Management, restrict access to Remote Diagnostics to prevent local users from bypassing security policies.

Correção

Identificadores relacionados

CVE-2005-3786

Produtos afetados

Console One

Novell Zenworks 6.5 Desktop Management

Novell Zenworks For Desktops

Novell Zenworks For Servers

Referências · 6

• http://securitytracker.com/id?1015260 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3786 · Nota de Segurança
• http://vupen.com/english/advisories/2005/2544 · Nota
• http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098818.htm · Aviso do Fabricante
• http://secunia.com/advisories/17700 · Aviso do Fabricante
• http://securityfocus.com/bid/15540 · Nota