cbcvebase.
CVE-2013-1079
published 2013-03-29

CVE-2013-1079: Directory traversal vulnerability in the ISCreateObject method in an ActiveX control in InstallShield\ISProxy.dll in AdminStudio in Novell ZENworks…

PriorityP334medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
2.33%
81.6th percentile
Directory traversal vulnerability in the ISCreateObject method in an ActiveX control in InstallShield\ISProxy.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.3 through 11.2 allows remote attackers to execute arbitrary local DLL files via a crafted web page that also calls the Initialize method.

Affected

8 ranges
VendorProductVersion rangeFixed in
novellzenworks_configuration_management——
novellzenworks_configuration_management——
novellzenworks_configuration_management——
novellzenworks_configuration_management——
novellzenworks_configuration_management——
novellzenworks_configuration_management——
novellzenworks_configuration_management——
novellzenworks_configuration_management——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.