Approved changes feed: RSS · Atom

cpe:2.3:a:novell:zenworks_endpoint_security_management:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNovell (4a1c187d-e568-531f-92b0-685a3df2807c)
ProductZenworks Endpoint Security Management (bca4e1d2-c25c-5f66-b93e-c86add5b733c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-5665 vulnerable 2026-06-08 04:50:06.670577 Details available
STEngine.exe 3.5.0.20 in Novell ZENworks Endpoint Security Management (ESM) 3.5, and other ESM versions before 3.5.0.82, dynamically creates scripts in a world-writable directory when generating diagnostic reports, which allows local users to gain privileges, as demonstrated by creating a cmd.exe binary in the diagnostic report directory.
Published: 2008-01-09T00:00:00.000Z
Updated: 2024-08-07T15:39:13.549Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.