Novell ZENworks for Desktops 4.0.1, ZENworks for Servers 3.0.2, and ZENworks 6.5 Desktop Management does not restrict access to Remote Diagnostics, which allows local users to bypass security policies by using Console One.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Zenworks | Novell | 6.5 (including) | 6.5 (including) |
| Zenworks_desktops | Novell | 4.0.1 (including) | 4.0.1 (including) |
| Zenworks_servers | Novell | 3.0.2 (including) | 3.0.2 (including) |
References
- http://secunia.com/advisories/17700
- http://securitytracker.com/id?1015260
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098818.htm
- http://www.securityfocus.com/bid/15540
- http://www.vupen.com/english/advisories/2005/2544
- http://secunia.com/advisories/17700
- http://securitytracker.com/id?1015260
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098818.htm
- http://www.securityfocus.com/bid/15540
- http://www.vupen.com/english/advisories/2005/2544