CVE-2010-4229: Path Traversal
First published: Mon Apr 18 2011(Updated: )
Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management (ZAM) in Novell ZENworks Configuration Management 10.3 before 10.3.2, and 11, allows remote attackers to overwrite files, and subsequently execute arbitrary code, via directory traversal sequences in a filename field in an upload request.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Micro Focus ZENworks Configuration Management | =10.3.1 | |
| Micro Focus ZENworks Configuration Management | =11 | |
| Micro Focus ZENworks Configuration Management | =10.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://securitytracker.com/id?1025313
- http://www.novell.com/support/viewContent.do?externalId=7007841
- http://secunia.com/advisories/44120
- http://www.vupen.com/english/advisories/2011/0917
- http://zerodayinitiative.com/advisories/ZDI-11-118/
- http://www.securityfocus.com/bid/47295
- http://securityreason.com/securityalert/8207
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66656
- http://www.securityfocus.com/archive/1/517425/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2010-4229?
CVE-2010-4229 is classified as a high severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2010-4229?
To fix CVE-2010-4229, upgrade the ZENworks Configuration Management to version 10.3.2 or later, or version 11 which addresses this vulnerability.
What impact does CVE-2010-4229 have on affected systems?
CVE-2010-4229 allows remote attackers to overwrite files and execute arbitrary code, leading to potential system compromise.
Which versions are affected by CVE-2010-4229?
CVE-2010-4229 affects Micro Focus ZENworks Configuration Management versions 10.3.1, 10.3, and 11 prior to the security updates.
Is CVE-2010-4229 a zero-day vulnerability?
CVE-2010-4229 was disclosed in 2010, and therefore is not classified as a zero-day vulnerability since a patch has been made available.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/novell
- canonical/novell zenworks configuration management
- version/novell zenworks configuration management/10.3.1
- version/novell zenworks configuration management/11
- version/novell zenworks configuration management/10.3