CVE-2005-3786

Published: Nov 23, 2005Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Novell ZENworks for Desktops 4.0.1, ZENworks for Servers 3.0.2, and ZENworks 6.5 Desktop Management does not restrict access to Remote Diagnostics, which allows local users to bypass security policies by using Console One.

Affected (3)

Products: Novell: Zenworks, Zenworks Desktops, Zenworks Servers

3 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Novell Zenworks	Version 6.5
Novell Zenworks Desktops	Version 4.0.1
Novell Zenworks Servers	Version 3.0.2

References (10)

http://secunia.com/advisories/17700

Source: cve@mitre.org

PatchVendor Advisory

http://securitytracker.com/id?1015260

Source: cve@mitre.org

http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098818.htm

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/15540

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2544

Source: cve@mitre.org

http://secunia.com/advisories/17700