SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2005-1543

Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENworks 6.5 Desktop and Server Management, ZENworks for Desktops 4.x, ZENworks for Servers 3.x, and Remote Management allows remote…

HIGH 7.5EPSS 66.1%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 66.1%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.

Description

Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENworks 6.5 Desktop and Server Management, ZENworks for Desktops 4.x, ZENworks for Servers 3.x, and Remote Management allows remote attackers to execute arbitrary code via (1) unspecified vectors, (2) type 1 authentication requests, and (3) type 2 authentication requests.

CVSS 2.0
7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
66.10% probability · 99th percentile
CISA KEV
Not listed
Affected
novell/zenworks · novell/zenworks desktops · novell/zenworks remote management · novell/zenworks server management · novell/zenworks servers
Source
cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.