CVE-2005-3786 - Vulnerability Details - OpenCVE

Novell ZENworks for Desktops 4.0.1, ZENworks for Servers 3.0.2, and ZENworks 6.5 Desktop Management does not restrict access to Remote Diagnostics, which allows local users to bypass security policies by using Console One.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Novell	Zenworks Zenworks Desktops Zenworks Servers

Configuration 1 [-]

OR	cpe:2.3:a:novell:zenworks:6.5:::::::*
	cpe:2.3:a:novell:zenworks_desktops:4.0.1:::::::*
	cpe:2.3:a:novell:zenworks_servers:3.0.2:::::::*

No data.

References

Link	Providers
http://secunia.com/advisories/17700
http://securitytracker.com/id?1015260
http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098818.htm
http://www.securityfocus.com/bid/15540
http://www.vupen.com/english/advisories/2005/2544

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-11-23T23:00:00

Updated: 2024-08-07T23:24:36.206Z

Reserved: 2005-11-23T00:00:00

Link: CVE-2005-3786

Vulnrichment

No data.

NVD

Status : Modified

Published: 2005-11-23T23:03:00.000

Modified: 2024-11-21T00:02:40.683

Link: CVE-2005-3786

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2005-11-22T00:00:00", "descriptions": [{"lang": "en", "value": "Novell ZENworks for Desktops 4.0.1, ZENworks for Servers 3.0.2, and ZENworks 6.5 Desktop Management does not restrict access to Remote Diagnostics, which allows local users to bypass security policies by using Console One."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2009-02-26T10:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "ADV-2005-2544", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2005/2544"}, {"name": "1015260", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1015260"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098818.htm"}, {"name": "17700", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/17700"}, {"name": "15540", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/15540"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2005-3786", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Novell ZENworks for Desktops 4.0.1, ZENworks for Servers 3.0.2, and ZENworks 6.5 Desktop Management does not restrict access to Remote Diagnostics, which allows local users to bypass security policies by using Console One."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "ADV-2005-2544", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2005/2544"}, {"name": "1015260", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1015260"}, {"name": "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098818.htm", "refsource": "CONFIRM", "url": "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098818.htm"}, {"name": "17700", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/17700"}, {"name": "15540", "refsource": "BID", "url": "http://www.securityfocus.com/bid/15540"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T23:24:36.206Z"}, "title": "CVE Program Container", "references": [{"name": "ADV-2005-2544", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2005/2544"}, {"name": "1015260", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1015260"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098818.htm"}, {"name": "17700", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/17700"}, {"name": "15540", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/15540"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2005-3786", "datePublished": "2005-11-23T23:00:00", "dateReserved": "2005-11-23T00:00:00", "dateUpdated": "2024-08-07T23:24:36.206Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:novell:zenworks:6.5:*:*:*:*:*:*:*", "matchCriteriaId": "C4C0F6C2-8583-4CE7-A95C-59EB4C948F63", "vulnerable": true}, {"criteria": "cpe:2.3:a:novell:zenworks_desktops:4.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "D79D1539-0284-4861-852D-D07AD9A538F8", "vulnerable": true}, {"criteria": "cpe:2.3:a:novell:zenworks_servers:3.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "F7306E34-AFF4-40D8-BD03-F199FF5893C7", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Novell ZENworks for Desktops 4.0.1, ZENworks for Servers 3.0.2, and ZENworks 6.5 Desktop Management does not restrict access to Remote Diagnostics, which allows local users to bypass security policies by using Console One."}], "id": "CVE-2005-3786", "lastModified": "2024-11-21T00:02:40.683", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2005-11-23T23:03:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/17700"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1015260"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098818.htm"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/15540"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2005/2544"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/17700"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1015260"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098818.htm"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/15540"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2005/2544"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}