PT-2011-4006 · Novell · Novell Zenworks Configuration Management+1

Andrea Micalizzi + 1 · Publicado 2011-11-07 · Atualizado 2012-07-27 · CVE-2011-2657

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Novell ZENworks Configuration Management versions 10.2 through 11 SP1

Description The issue allows remote attackers to execute arbitrary commands via a pathname in the first argument to the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in LaunchHelp.dll. This enables attackers to potentially execute malicious commands on affected systems.

Recommendations For versions 10.2 through 11 SP1, consider disabling the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control until a patch is available. Restrict access to the LaunchHelp.dll to minimize the risk of exploitation. Avoid using the LaunchHelp ActiveX control in the affected Novell ZENworks Configuration Management versions until the issue is resolved.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2011-2657

ZDI-11-318

Produtos afetados

Launchhelp.Dll

Novell Zenworks Configuration Management

Referências · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/zenworks_helplauncher_exec.rb · Exploit
• 🔥 https://exploit-db.com/exploits/19718 · Exploit
• 🔥 http://exploit-db.com/exploits/19718 · Exploit
• http://zerodayinitiative.com/advisories/ZDI-11-318 · Nota
• http://novell.com/support/kb/doc.php?id=7009570 · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-11-318 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2011-2657 · Nota de Segurança