Novell.ZENworks.Preboot.Service.Code.Execution

Description

This indicates an attack attempt against a buffer-overflow vulnerability in
Novell ZENworks.
The vulnerability is caused by an error when the vulnerable software handles
a malicious packet sent to the Preboot Service. It allows a remote attacker to execute arbitrary code via sending a crafted packet.

Affected Products

Novell ZENworks 10 Configuration Management Imaging

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Upgrade to the latest version, available from the vendor's web site:
http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=7005572&sliceId=1&docTypeID=DT_TID_1_1&dialogID=138523325&stateId=0%200%20138517923

References