PT-2011-4003 · Novell · Novell Cloud Manager

Publicado 2011-09-02 · Atualizado 2011-10-06 · CVE-2011-2654

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell Cloud Manager version 1.1.2

Description The issue is related to the RPC implementation in the server, which does not properly initialize objects. This allows remote attackers to execute arbitrary code by making RPC calls that leverage incorrect privileges associated with a partially initialized session.

Recommendations For Novell Cloud Manager version 1.1.2, apply Patch 3 to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2011-2654

ZDI-11-278

Produtos afetados

Novell Cloud Manager

Referências · 7

• http://zerodayinitiative.com/advisories/ZDI-11-278 · Nota
• http://download.novell.com/Download?buildid=NSONlV5PqMo~ · Nota
• https://zerodayinitiative.com/advisories/ZDI-11-278 · Nota de Segurança
• http://secunia.com/advisories/45845 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-2654 · Nota de Segurança
• http://securityfocus.com/bid/49432 · Nota
• http://securitytracker.com/id?1026006 · Nota