CVEvulnerability

CVE-2013-1079

6.8 MEDIUM Published 2013-03-29 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-03-29
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-22

Description

Directory traversal vulnerability in the ISCreateObject method in an ActiveX control in InstallShield\ISProxy.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.3 through 11.2 allows remote attackers to execute arbitrary local DLL files via a crafted web page that also calls the Initialize method.

Affected configurations

• novell zenworks configuration management 10.3 • novell zenworks configuration management 10.3.1 • novell zenworks configuration management 10.3.2 • novell zenworks configuration management 10.3.3 • novell zenworks configuration management 11 • novell zenworks configuration management 11.1 • novell zenworks configuration management 11.1a • novell zenworks configuration management 11.2

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References