NVD

Id
37334  
Name
CVE-2013-1079  
Description
Directory traversal vulnerability in the ISCreateObject method in an ActiveX control in InstallShieldISProxy.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.3 through 11.2 allows remote attackers to execute arbitrary local DLL files via a crafted web page that also calls the Initialize method.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-03-29  
Modified Date
2013-04-02  
Seq
2013-1079  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
190751 37334 CVE-2013-1079 http://www.novell.com/support/kb/doc.php?id=7011811  View
190752 37334 CVE-2013-1079 http://www.zerodayinitiative.com/advisories/ZDI-13-048/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20528 JVNDB-2013-002103 Novell ZENworks Configuration Management の AdminStudio におけるディレクトリトラバーサルの脆弱性 Novell ZENworks Configuration Management の AdminStudio の InstallShieldISProxy.dll 内の ActiveX コントロールの ISCreateObject メソッドには、任意のローカル DLL ファイルを実行される脆弱性が存在します。 CVE-2013-1079 61021 CVE-2013-1079 37334 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002103.html 2013-02-21 2013-04-02 View