CVE-2011-2657: Path Traversal
Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in LaunchHelp.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 allows remote attackers to execute arbitrary commands via a pathname in the first argument.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2657?
CVE-2011-2657 has a high severity rating, allowing remote attackers to execute arbitrary commands on affected systems.
How do I fix CVE-2011-2657?
To fix CVE-2011-2657, it is recommended to apply the latest security patches or updates provided by Novell for ZENworks Configuration Management.
Which versions of Novell ZENworks Configuration Management are affected by CVE-2011-2657?
CVE-2011-2657 affects versions 10.2, 10.3, and 11 SP1 of Novell ZENworks Configuration Management.
What type of vulnerability is CVE-2011-2657?
CVE-2011-2657 is classified as a directory traversal vulnerability in an ActiveX control.
Can CVE-2011-2657 be exploited remotely?
Yes, CVE-2011-2657 can be exploited remotely, allowing attackers to manipulate the system via crafted pathnames.