PT-2005-4537 · Novell · Novell Zenworks For Desktops+3

Published 2005-11-23 · Updated 2011-03-08 · CVE-2005-3786

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Novell ZENworks for Desktops version 4.0.1 Novell ZENworks for Servers version 3.0.2 Novell ZENworks 6.5 Desktop Management (affected versions not specified)

Description The issue allows local users to bypass security policies by utilizing Console One due to unrestricted access to Remote Diagnostics.

Recommendations For Novell ZENworks for Desktops version 4.0.1, restrict access to Remote Diagnostics to prevent local users from bypassing security policies. For Novell ZENworks for Servers version 3.0.2, restrict access to Remote Diagnostics to prevent local users from bypassing security policies. For Novell ZENworks 6.5 Desktop Management, restrict access to Remote Diagnostics to prevent local users from bypassing security policies.

Fix

Related Identifiers

CVE-2005-3786

Affected Products

Console One

Novell Zenworks 6.5 Desktop Management

Novell Zenworks For Desktops

Novell Zenworks For Servers

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2005-3786 · Security Note
• http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098818.htm · Vendor Advisory
• http://secunia.com/advisories/17700 · Vendor Advisory
• http://securitytracker.com/id?1015260 · Note
• http://vupen.com/english/advisories/2005/2544 · Note
• http://securityfocus.com/bid/15540 · Note