Unscored severity · published Nov 23, 2005
CVE-2005-3786
Novell ZENworks for Desktops 4.0.1, ZENworks for Servers 3.0.2, and ZENworks 6.5 Desktop Management does not restrict access to Remote Diagnostics, which allows local users to…
–
CVSS
0.3%
EPSS
No
On KEV
Description
Novell ZENworks for Desktops 4.0.1, ZENworks for Servers 3.0.2, and ZENworks 6.5 Desktop Management does not restrict access to Remote Diagnostics, which allows local users to bypass security policies by using Console One.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ZE
Zenworks · Novell
6.5 · source: NVD
ZD
Zenworks Desktops · Novell
4.0.1 · source: NVD
ZS
Zenworks Servers · Novell
3.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3786
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3786
Patch
http://secunia.com/advisories/17700
securitytracker.com
http://securitytracker.com/id?1015260
Patch
http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098818.htm
www.securityfocus.com
http://www.securityfocus.com/bid/15540
www.vupen.com
http://www.vupen.com/english/advisories/2005/2544
More from Zenworks
–
CVE-2007-1119
Unspecified vulnerability in Novell ZENworks 7 Desktop Management Support Pack 1 before Hot patch 3 (ZDM7SP1HP3) allows remote attackers to upload images to certain folders that…
–
CVE-2006-3425
FastPatch for (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1, and (b) Novell ZENworks 6.2 SR1 and earlier, does not require authentication for…
–
CVE-2006-3426
Directory traversal vulnerability in (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and (b) Novell ZENworks 6.2 SR1 and earlier allows remote…
–
CVE-2006-3430
SQL injection vulnerability in checkprofile.asp in (1) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and (2) Novell ZENworks 6.2 SR1 and earlier, allows…
–
CVE-2005-1543
Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENworks 6.5 Desktop and Server Management, ZENworks for Desktops…