Novell ZENworks Control Center File Upload Remote Code Execution

critical Nessus Plugin ID 65722

Language:

Synopsis

An application on the remote host is affected by a remote code execution vulnerability.

Description

The installed version of Novell ZENworks Control Center has a flaw with authentication checking on '/zenworks/jsp/index.jsp' that can allow a remote, unauthenticated attacker to upload arbitrary files and execute them with SYSTEM privileges.

Solution

Upgrade to ZENworks 11.2.2 and apply the interim fix, or apply 11.2.3a Monthly Update 1 for 11.2.3 installs.

Plugin Details

Severity: Critical

ID: 65722

File Name: novell_zcc_rce.nasl

Version: 1.10

Type: local

Agent: windows

Family: Windows

Published: 3/28/2013

Updated: 11/15/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.4

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/a:novell:zenworks

Required KB Items: SMB/Novell/ZENworks/Installed

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 3/21/2013

Vulnerability Publication Date: 3/22/2013

Exploitable With

CANVAS (D2ExploitPack)

Metasploit (Novell ZENworks Configuration Management Remote Execution)

Elliot (Novell ZENworks Configuration Management 11 SP2 File Upload)

Reference Information

CVE: CVE-2013-1080

BID: 58668

Detections

Analytics