CVE-2011-2658
First published: Thu Jul 26 2012(Updated: )
The ISList.ISAvi ActiveX control in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 provides access to the mscomct2.ocx file, which allows remote attackers to execute arbitrary code by leveraging unspecified mscomct2 flaws.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Micro Focus ZENworks Configuration Management | =11-sp1 | |
| Micro Focus ZENworks Configuration Management | =10.2 | |
| Micro Focus ZENworks Configuration Management | =10.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2011-2658?
CVE-2011-2658 has a critical severity rating due to the potential for remote code execution.
How do I fix CVE-2011-2658?
The recommended fix for CVE-2011-2658 is to upgrade to a patched version of Novell ZENworks Configuration Management.
Which versions are affected by CVE-2011-2658?
CVE-2011-2658 affects Novell ZENworks Configuration Management versions 10.2, 10.3, and 11 SP1.
What is the main risk associated with CVE-2011-2658?
The main risk associated with CVE-2011-2658 is that attackers can execute arbitrary code remotely on vulnerable systems.
Is there a workaround for CVE-2011-2658?
There are no known effective workarounds for CVE-2011-2658, so upgrading is the best course of action.
- agent/references
- agent/type
- agent/first-publish-date
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/severity
- agent/weakness
- agent/description
- agent/event
- agent/source
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/softwarecombine
- agent/tags
- vendor/novell
- canonical/novell zenworks configuration management
- version/novell zenworks configuration management/11-sp1
- version/novell zenworks configuration management/10.2
- version/novell zenworks configuration management/10.3