CVE-2013-1092: High severity novell zenworks desktop management vulnerability
Multiple unquoted Windows search path vulnerabilities in Novell ZENworks Desktop Management (ZDM) 7 through 7.1 might allow local users to gain privileges via a Trojan horse "program" file in the C: folder, related to an attempted launch of (1) ZenRem32.exe or (2) wm.exe.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1092?
CVE-2013-1092 is considered a high severity vulnerability due to its potential to allow local users to gain elevated privileges.
How do I fix CVE-2013-1092?
To fix CVE-2013-1092, ensure that all unquoted service paths in the Novell ZENworks Desktop Management installation are properly quoted.
What software versions are affected by CVE-2013-1092?
CVE-2013-1092 affects Novell ZENworks Desktop Management versions 7 and 7.1.
What type of attacks does CVE-2013-1092 facilitate?
CVE-2013-1092 facilitates local privilege escalation attacks through the execution of malicious programs.
Is there a workaround for CVE-2013-1092?
A potential workaround for CVE-2013-1092 is to restrict access to the C: folder to prevent unauthorized users from placing Trojan horse files.