Novell ZENworks Asset Management File Upload Traversal

Added: 05/27/2011
CVE: CVE-2010-4229
BID: 47295
OSVDB: 71872


Novell ZENworks is a resource management solution consisting of a management server and management agents.


The Asset Management module (ZAM) of ZENworks version 10.3 prior to 10.3.2 and version 11 fail to validate the name of uploaded files. An attacker may exploit this behavior to upload an executable Java file while traversing the directory structure, such that the uploaded file will be executed by the server.


Upgrade to ZENworks 10.3.2 or later.



This exploit has been tested against Novell ZENworks Configuration Management 10.3 running on Microsoft Windows Server 2003 SP2 English (DEP OptOut) and Microsoft Windows Server 2008 SP2 English (DEP OptOut). The exploit may not execute immediately. It may take 15 seconds or more before the payload is executed. This exploit creates a remote shell web application named 'exploit' on the webserver. This application remains after the connection is closed and must be manually removed.



Back to exploit index