Novell ZENworks Desktop Management Code Execution Vulnerabilities

Multiple vulnerabilities have been identified in Novell ZENworks Desktop Management, which could be exploited by remote attackers to take complete control of a vulnerable system.

1. An uninitialized pointer in the "ZenRem32.exe" process when handling incoming connections to port 1761, which could be exploited by remote unauthenticated attackers to execute arbitrary code with elevated privileges.

2. A buffer overflow error in the "ZenRem32.exe" process when handling the Console DN field of incoming requests sent to port 1761, which could be exploited by remote unauthenticated attackers to execute arbitrary code with elevated privileges.

3. A buffer overflow error in the tftpd server component when handling the filename in a Read Request (0x01) packet type sent to port 69/UDP, which could be exploited by remote unauthenticated attackers to execute arbitrary code with elevated privileges.