CVE-2010-4299

Description

Heap-based buffer overflow in ZfHIPCND.exe in Novell Zenworks 7 Handheld Management (ZHM) allows remote attackers to execute arbitrary code via a crafted request to TCP port 2400.

Affected products

• Novell / zenworks_handheld_management7 – 7
• Novell / zenworks_handheld_management7 – 7

References

• MAILING_LISThttp://marc.info/?l=full-disclosure&m=128916914213292&w=2
• MISChttp://www.novell.com/support/viewContent.do?externalId=7007135
• MISChttp://www.securitytracker.com/id?1024691
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-10-230/
• VENDOR_ADVISORYhttp://secunia.com/advisories/42130