medium6.8Public exploit code
CVE-2011-2657
Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in LaunchHelp.dll in AdminStudio in Novell ZEN…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AdminStudio - 'LaunchHelp.dll' ActiveX Arbitrary Code Execution (Metasploit)2012-07-11 · remote · windows · Verified
Impact
Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in LaunchHelp.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 allows remote attackers to execute arbitrary commands via a pathname in the first argument.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Novell | Zenworks Configuration Management | Versions 10.2, 10.3, 11 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.exploit-db.com/exploits/19718/
- http://www.novell.com/support/kb/doc.php?id=7009570
- http://www.zerodayinitiative.com/advisories/ZDI-11-318/
- http://www.exploit-db.com/exploits/19718/
- http://www.novell.com/support/kb/doc.php?id=7009570
- http://www.zerodayinitiative.com/advisories/ZDI-11-318/