PT-2008-1512 · Novell · Novell Zenworks Endpoint Security Management

Publicado

2008-01-09

·

Atualizado

2011-03-08

·

CVE-2007-5665

CVSS v2.0

7.2

Alta

VetorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Novell ZENworks Endpoint Security Management (ESM) versions 3.5.0.20 through 3.5.0.81
Description The issue allows local users to gain privileges by dynamically creating scripts in a world-writable directory when generating diagnostic reports. This can be exploited by creating a binary, such as cmd.exe, in the diagnostic report directory.
Recommendations For Novell ZENworks Endpoint Security Management (ESM) versions 3.5.0.20 through 3.5.0.81, update to version 3.5.0.82 or later to resolve the issue.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-5665

Produtos afetados

Novell Zenworks Endpoint Security Management