CVE-2005-1543
50Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 67%
from disclosure to weapon79 days
Published on NVDMay 25
1st PoC+79d
metasploitMay 19
exploitation probability
67%top 1% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENworks 6.5 Desktop and Server Management, ZENworks for Desktops 4.x, ZENworks for Servers 3.x, and Remote Management allows remote attackers to execute arbitrary code via (1) unspecified vectors, (2) type 1 authentication requests, and (3) type 2 authentication requests.
Affected products
n/a · n/apublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/16815unverifiedexploitdbwww.exploit-db.com/exploits/1150unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://marc.info/?l=bugtraq&m=111645317713662&w=2http://secunia.com/advisories/15433http://securitytracker.com/id?1014005https://exchange.xforce.ibmcloud.com/vulnerabilities/20639https://exchange.xforce.ibmcloud.com/vulnerabilities/20644https://exchange.xforce.ibmcloud.com/vulnerabilities/20645http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097644.htmhttp://www.rem0te.com/public/images/zen.pdfhttp://www.securityfocus.com/bid/13678http://www.vupen.com/english/advisories/2005/0571