Unscored severity · published Dec 8, 2011
CVE-2011-2653
Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management (ZAM) 7.5 allows remote attackers to execute arbitrary code by uploading an…
–
CVSS
71.3%
EPSS
No
On KEV
Description
Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management (ZAM) 7.5 allows remote attackers to execute arbitrary code by uploading an executable file.
Exploitation
Is it being used?
Exploit prediction (EPSS)71.3% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ZA
Zenworks Asset Management · Novell
7.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2653
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2653
download.novell.com
http://download.novell.com/Download?buildid=hPvHtXeNmCU~
zerodayinitiative.com
http://zerodayinitiative.com/advisories/ZDI-11-342/
More from Zenworks Asset Management
–
CVE-2012-4933
The rtrlet web application in the Web Console in Novell ZENworks Asset Management (ZAM) 7.5 uses a hard-coded username of Ivanhoe and a hard-coded password of Scott for the (1)…
–
CVE-2006-6299
Integer overflow in Msg.dll in Novell ZENworks 7 Asset Management (ZAM) before SP1 IR11 and the Collection client allows remote attackers to execute arbitrary code via crafted…