CVE-2010-4299

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-11-22 · updated 2026-06-16
Weakness: CWE-119

Description

Heap-based buffer overflow in ZfHIPCND.exe in Novell Zenworks 7 Handheld Management (ZHM) allows remote attackers to execute arbitrary code via a crafted request to TCP port 2400.

Affected products

Novell Zenworks Handheld Management: 7, 7-sp1

References

http://marc.info/?l=full-disclosure&m=128916914213292&w=2
http://secunia.com/advisories/42130
http://www.novell.com/support/viewContent.do?externalId=7007135
http://www.securitytracker.com/id?1024691
http://www.zerodayinitiative.com/advisories/ZDI-10-230/
http://marc.info/?l=full-disclosure&m=128916914213292&w=2
http://secunia.com/advisories/42130
http://www.novell.com/support/viewContent.do?externalId=7007135
http://www.securitytracker.com/id?1024691
http://www.zerodayinitiative.com/advisories/ZDI-10-230/

Get alerted when CVE-2010-4299 or the next vulnerability affects your stack