CVE-2011-2657

Directory traversal vulnerability in the LaunchProcess function in the LaunchHelp.HelpLauncher.1 ActiveX control in LaunchHelp.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 allows remote attackers to execute arbitrary commands via a pathname in the first argument.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

48.37% chance of exploitation in the next 30 days, 99th percentile

Published

2012-07-26

Updated

2024-09-16

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/19718/

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/zenworks_helplau…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/19718

References

• CVE Record
• NVD entry

Related

• CVE-2011-2653
• CVE-2011-2697
• CVE-2011-2641
• CVE-2011-2698
• CVE-2011-2628
• CVE-2011-2702