Novell ZENworks Configuration Management Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Novell ZENworks Configuration Management, which can be exploited to execute arbitrary code and view files on the target system.

1. A remote user can supply a specially crafted request (PreBoot Service Opcode 0x21) to view arbitrary files on the target system.
2. A remote user can send specially crafted data (PreBoot Service Opcode 0x4c and 0x6C) to trigger a stack overflow and execute arbitrary code on the target system. The code will run with the privileges of the target service.