Approved changes feed: RSS · Atom

cpe:2.3:a:novell:zenworks_patch_management_update_agent:6.4:*:unix:*:*:*:*:*

part: a version: 6.4 update: *

VendorNovell (4a1c187d-e568-531f-92b0-685a3df2807c)
ProductZenworks Patch Management Update Agent (42cd559d-07b9-54bb-bba9-8c7dba8f9525)
Editionunix
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-0525 vulnerable 2026-06-08 04:50:17.023475 Details available
PatchLink Update client for Unix, as used by Novell ZENworks Patch Management Update Agent for Linux/Unix/Mac (LUM) 6.2094 through 6.4102 and other products, allows local users to (1) truncate arbitrary files via a symlink attack on the /tmp/patchlink.tmp file used by the logtrimmer script, and (2) execute arbitrary code via a symlink attack on the /tmp/plshutdown file used by the rebootTask script.
Published: 2008-01-31T19:30:00.000Z
Updated: 2024-08-07T07:46:54.858Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.