Approved changes feed: RSS · Atom

cpe:2.3:a:novell:zenworks:*:sr1:*:*:*:*:*:*

part: a version: * update: sr1

VendorNovell (4a1c187d-e568-531f-92b0-685a3df2807c)
ProductZenworks (1a7c5a12-1f6e-5f67-b54e-41928289f7a4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-3430 vulnerable 2026-06-08 04:49:09.298360 Details available
SQL injection vulnerability in checkprofile.asp in (1) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and (2) Novell ZENworks 6.2 SR1 and earlier, allows remote attackers to execute arbitrary SQL commands via the agentid parameter.
Published: 2006-07-07T00:00:00.000Z
Updated: 2024-08-07T18:30:33.235Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3426 vulnerable 2026-06-08 04:49:09.293329 Details available
Directory traversal vulnerability in (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and (b) Novell ZENworks 6.2 SR1 and earlier allows remote attackers to overwrite arbitrary files and directories via a .. (dot dot) sequence in the (1) action, (2) agentid, or (3) index parameters to dagent/nwupload.asp, which are used as pathname components.
Published: 2006-07-07T00:00:00.000Z
Updated: 2024-08-07T18:30:33.570Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3425 vulnerable 2026-06-08 04:49:09.292753 Details available
FastPatch for (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1, and (b) Novell ZENworks 6.2 SR1 and earlier, does not require authentication for dagent/proxyreg.asp, which allows remote attackers to list, add, or delete PatchLink Distribution Point (PDP) proxy servers via modified (1) List, (2) Proxy, or (3) Delete parameters.
Published: 2006-07-07T00:00:00.000Z
Updated: 2024-08-07T18:30:33.542Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.