What is the severity of CVE-2011-2657?

CVE-2011-2657 has a high severity rating, allowing remote attackers to execute arbitrary commands on affected systems.

How do I fix CVE-2011-2657?

To fix CVE-2011-2657, it is recommended to apply the latest security patches or updates provided by Novell for ZENworks Configuration Management.

Which versions of Novell ZENworks Configuration Management are affected by CVE-2011-2657?

CVE-2011-2657 affects versions 10.2, 10.3, and 11 SP1 of Novell ZENworks Configuration Management.

What type of vulnerability is CVE-2011-2657?

CVE-2011-2657 is classified as a directory traversal vulnerability in an ActiveX control.

Can CVE-2011-2657 be exploited remotely?

Yes, CVE-2011-2657 can be exploited remotely, allowing attackers to manipulate the system via crafted pathnames.

Vulnerability/
CVE-2011-2657

medium

6.8

CWE

26/7/2012

16/9/2024

CVE-2011-2657: Path Traversal

First published: Thu Jul 26 2012(Updated: )

Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in LaunchHelp.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 allows remote attackers to execute arbitrary commands via a pathname in the first argument.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Micro Focus ZENworks Configuration Management	=11-sp1
Micro Focus ZENworks Configuration Management	=10.2
Micro Focus ZENworks Configuration Management	=10.3

Remedy

http://www.novell.com/support/kb/doc.php?id=7009570

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2011-2657?
CVE-2011-2657 has a high severity rating, allowing remote attackers to execute arbitrary commands on affected systems.
How do I fix CVE-2011-2657?
To fix CVE-2011-2657, it is recommended to apply the latest security patches or updates provided by Novell for ZENworks Configuration Management.
Which versions of Novell ZENworks Configuration Management are affected by CVE-2011-2657?
CVE-2011-2657 affects versions 10.2, 10.3, and 11 SP1 of Novell ZENworks Configuration Management.
What type of vulnerability is CVE-2011-2657?
CVE-2011-2657 is classified as a directory traversal vulnerability in an ActiveX control.
Can CVE-2011-2657 be exploited remotely?
Yes, CVE-2011-2657 can be exploited remotely, allowing attackers to manipulate the system via crafted pathnames.

agent/type
agent/author
agent/references
agent/severity
agent/remedy
agent/weakness
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/first-publish-date
agent/event
agent/source
collector/nvd-historical
agent/software-canonical-lookup-request
collector/nvd-index
agent/softwarecombine
agent/tags
vendor/novell
canonical/novell zenworks configuration management
version/novell zenworks configuration management/11-sp1
version/novell zenworks configuration management/10.2
version/novell zenworks configuration management/10.3

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.