Unrated severityNVD Advisory· Published Jul 26, 2012· Updated Apr 29, 2026
CVE-2011-2657
CVE-2011-2657
Description
Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in LaunchHelp.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 allows remote attackers to execute arbitrary commands via a pathname in the first argument.
Affected products
3cpe:2.3:a:novell:zenworks_configuration_management:10.2:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:novell:zenworks_configuration_management:10.2:*:*:*:*:*:*:*
- cpe:2.3:a:novell:zenworks_configuration_management:10.3:*:*:*:*:*:*:*
- cpe:2.3:a:novell:zenworks_configuration_management:11:sp1:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.novell.com/support/kb/doc.phpnvdPatchVendor Advisory
- www.exploit-db.com/exploits/19718/nvdExploit
- www.zerodayinitiative.com/advisories/ZDI-11-318/nvd
News mentions
0No linked articles in our index yet.