CVE-2011-2653

high · 10

Directory traversal vulnerability in the rtrlet component in Novell ZENworks Asset Management (ZAM) 7.5 allows remote attackers to execute arbitrary code by uploading an executable file.

CVSS

72.5%

EPSS (exploit prob.)

99th

EPSS percentile

2011-12-08

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-22

Affected products

Vendor	Product	Affected versions
novell	zenworks_asset_management	7.5

Check a specific version with /api/v1/cve/match.

References

http://download.novell.com/Download?buildid=hPvHtXeNmCU~
http://zerodayinitiative.com/advisories/ZDI-11-342/
http://download.novell.com/Download?buildid=hPvHtXeNmCU~
http://zerodayinitiative.com/advisories/ZDI-11-342/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2011-2653