RULE(RULE ID:322066)

Rule General Information
Release Date: 2019-06-27
Rule Name: Novel ZENworks Mobile Management MDM.php language Param Code Execution Vulnerability (CVE-2013-1081)
Severity:
CVE ID:
Rule Protection Details
Description: Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management (ZMM) 2.6.1 and 2.7.0 allows remote attackers to include and execute arbitrary local files via the language parameter.
Impact: An attacker can execute arbitrary code via a successful exploit in the context of the vulnerable software.
Affected OS: Windows, Linux, FreeBSD, Solaris, Other Unix, Network Device, Mac OS, iOS, Android, Others
Reference: http://www.novell.com/support/kb/doc.php?id=7011895
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
http://www.novell.com/support/kb/doc.php?id=7011895