CVE-2011-0742

critical

Description

Buffer overflow in ZfHIPCND.exe in Novell ZENworks Handheld Management 7.0 allows remote attackers to execute arbitrary code via a crafted IP Conduit packet to TCP port 2400.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/64930

http://www.zerodayinitiative.com/advisories/ZDI-11-026/

http://www.vupen.com/english/advisories/2011/0221

http://www.securitytracker.com/id?1024993

http://www.securityfocus.com/bid/46024

http://www.securityfocus.com/archive/1/516045/100/0/threaded

http://www.novell.com/support/viewContent.do?externalId=7007663

http://telussecuritylabs.com/threats/show/FSC20110125-06

http://secunia.com/advisories/43094

http://osvdb.org/70694

Details

Source: Mitre, NVD

Published: 2011-02-02

Updated: 2024-11-21

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H