APP: Novell ZENworks Handheld Management ZfHIPCND.exe Buffer Overflow (CVE-2010-4299)

This signature detects attempts to exploit a known vulnerability in Novell ZENworks Handheld Management. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.

Extended Description

Novell ZENworks Handheld Management is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary-checks on user-supplied data. An attacker can leverage this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will compromise the affected application. Failed exploit attempts will result in a denial-of-service condition. Novell ZENworks Handheld Management 7 SP1 is vulnerable.

References

BugTraq: 44700

CVE: CVE-2010-4299

Short Name

APP:NOVELL:ZENWORKS-ZFHIPCND-OF

Severity

Major

Recommended

False

Recommended Action

Drop

APP: Novell ZENworks Handheld Management ZfHIPCND.exe Buffer Overflow (CVE-2010-4299)

Extended Description

References

Found a potential security threat?