Signature Detail
Short Name |
APP:NOVELL:ZENWORKS-LG-DIR-TRAV |
|---|---|
Severity |
Critical |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Novell ZENworks Management Language Parameter Directory Traversal |
Release Date |
2013/08/07 |
Update Number |
2288 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: Novell ZENworks Management Language Parameter Directory Traversal
This signature detects attempts to exploit a known vulnerability against Novell ZENworks Mobile Management server. A successful attack can lead to arbitrary code execution.
Extended Description
Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management (ZMM) 2.6.1 and 2.7.0 allows remote attackers to include and execute arbitrary local files via the language parameter.
Affected Products
- novell zenworks_mobile_management 2.6.1
- novell zenworks_mobile_management 2.7.0
References
- CVE: CVE-2013-1082
- CVE: CVE-2013-1081