PT-2011-4002
CVE-2011-2653
·
Published
2011-12-07
·
Updated
2012-03-05
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Novell ZENworks Asset Management version 7.5
Description
The issue allows remote attackers to execute arbitrary code by uploading an executable file due to a directory traversal vulnerability in the rtrlet component.
Recommendations
For Novell ZENworks Asset Management version 7.5, consider restricting access to the rtrlet component until a patch is available to prevent remote code execution.
Found an issue in the description? Have something to add? Feel free to write us 👾