Unrated severityNVD Advisory· Published Jun 7, 2015· Updated May 6, 2026
CVE-2010-5323
CVE-2010-5323
Description
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 before 10.3 allows remote attackers to execute arbitrary code via a crafted WAR pathname in the filename parameter in conjunction with WAR content in the POST data, a different vulnerability than CVE-2010-5324.
Affected products
3cpe:2.3:a:novell:zenworks_configuration_management:10.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:novell:zenworks_configuration_management:10.0:*:*:*:*:*:*:*
- cpe:2.3:a:novell:zenworks_configuration_management:10.1:*:*:*:*:*:*:*
- cpe:2.3:a:novell:zenworks_configuration_management:10.2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.novell.com/support/kb/doc.phpnvdPatchVendor Advisory
- www.exploit-db.com/exploits/16784/nvdExploit
- www.zerodayinitiative.com/advisories/ZDI-10-078/nvd
- bugzilla.novell.com/show_bug.cginvd
News mentions
0No linked articles in our index yet.