CVE-2005-3786

Novell ZENworks for Desktops 4.0.1, ZENworks for Servers 3.0.2, and ZENworks 6.5 Desktop Management does not restrict access to Remote Diagnostics, which allows local users to bypass security policies by using Console One.

CVSS v2.0 4.6 MEDIUM

4.6^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/advisories/17700	Patch Vendor Advisory
http://securitytracker.com/id?1015260
http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098818.htm	Patch Vendor Advisory
http://www.securityfocus.com/bid/15540
http://www.vupen.com/english/advisories/2005/2544
http://secunia.com/advisories/17700	Patch Vendor Advisory
http://securitytracker.com/id?1015260
http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098818.htm	Patch Vendor Advisory
http://www.securityfocus.com/bid/15540
http://www.vupen.com/english/advisories/2005/2544

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:novell:zenworks:6.5:::::::*
	cpe:2.3:a:novell:zenworks_desktops:4.0.1:::::::*
	cpe:2.3:a:novell:zenworks_servers:3.0.2:::::::*

History

21 Nov 2024, 00:02

Type	Values Removed	Values Added
References	~~() http://secunia.com/advisories/17700 - Patch, Vendor Advisory~~	() http://secunia.com/advisories/17700 - Patch, Vendor Advisory
References	~~() http://securitytracker.com/id?1015260 -~~	() http://securitytracker.com/id?1015260 -
References	~~() http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098818.htm - Patch, Vendor Advisory~~	() http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098818.htm - Patch, Vendor Advisory
References	~~() http://www.securityfocus.com/bid/15540 -~~	() http://www.securityfocus.com/bid/15540 -
References	~~() http://www.vupen.com/english/advisories/2005/2544 -~~	() http://www.vupen.com/english/advisories/2005/2544 -

Information

Published : 2005-11-23 23:03

Updated : 2024-11-21 00:02

NVD link : CVE-2005-3786

Mitre link : CVE-2005-3786

CVE.ORG link : CVE-2005-3786

JSON object : View

Products Affected

novell

zenworks
zenworks_desktops
zenworks_servers

CWE

NVD-CWE-Other

{"id": "CVE-2005-3786", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-11-23T23:03:00.000", "references": [{"url": "http://secunia.com/advisories/17700", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1015260", "source": "cve@mitre.org"}, {"url": "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098818.htm", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/15540", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2005/2544", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/17700", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securitytracker.com/id?1015260", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098818.htm", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/15540", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2005/2544", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Novell ZENworks for Desktops 4.0.1, ZENworks for Servers 3.0.2, and ZENworks 6.5 Desktop Management does not restrict access to Remote Diagnostics, which allows local users to bypass security policies by using Console One."}], "lastModified": "2024-11-21T00:02:40.683", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:novell:zenworks:6.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4C0F6C2-8583-4CE7-A95C-59EB4C948F63"}, {"criteria": "cpe:2.3:a:novell:zenworks_desktops:4.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D79D1539-0284-4861-852D-D07AD9A538F8"}, {"criteria": "cpe:2.3:a:novell:zenworks_servers:3.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F7306E34-AFF4-40D8-BD03-F199FF5893C7"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}