Secunia

Some vulnerabilities have been reported in Novell ZENworks Configuration Management, which can be exploited by malicious people to disclose sensitive information, cause a DoS (Denial of Service), or compromise a vulnerable system.

1) An unspecified error can be exploited to disclose sensitive information.

2) An unspecified error can be exploited to potentially execute arbitrary code.

3) An unspecified error can be exploited to cause a heap-based buffer overflow.

Vulnerability #1 is reported in version 10.1. Vulnerabilities #2 and #3 are reported in version 10.1.2a. Other versions may also be affected.

Solution
Use the product in trusted networks only.

Provided and/or discovered by
Reportedly modules for VulnDisco Pack.

Original Advisory
http://intevydis.com/vd-list.shtml

Deep Links
Links available in Customer Area