Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:DIR:ZEN-CVE-2015-0779 |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Novell ZENworks Configuration Management UploadServlet CVE-2015-0779 Directory Traversal |
Release Date |
2019/02/05 |
Update Number |
3139 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: Novell ZENworks Configuration Management UploadServlet CVE-2015-0779 Directory Traversal
This signature detects attempts to exploit a known vulnerability againstNovell ZENworks Configuration Management. A successful attack can lead to Directory Traversal.
Extended Description
Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11.3.2 allows remote attackers to execute arbitrary code via a crafted directory name in the uid parameter, in conjunction with a WAR filename in the filename parameter and WAR content in the POST data, a different vulnerability than CVE-2010-5323 and CVE-2010-5324.
Affected Products
- Novell zenworks_configuration_management 11
- Novell zenworks_configuration_management 11.2
- Novell zenworks_configuration_management 11.2.1
- Novell zenworks_configuration_management 11.2.2
- Novell zenworks_configuration_management 11.2.3
References