Buffer overflow in Novell Zenworks Handheld Management

CVE-2010-4299

Heap-based buffer overflow in ZfHIPCND.exe in Novell Zenworks 7 Handheld Management (ZHM) allows remote attackers to execute arbitrary code via a crafted request to TCP port 2400.

Vulnerability class: Buffer Overflow

EPSS: 0.081 (94.2th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (mailing-list, Patch, x_refsource_FULLDISC, Third Party Advisory)
  • cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
  • cve@mitre.org (VDB Entry, Third Party Advisory, x_refsource_MISC)
  • cve@mitre.org (Permissions Required, x_refsource_SECUNIA, third-party-advisory)