|CVSS SCORE||10.0, (AV:N/AC:L/Au:N/C:C/I:C/A:C)|
The specific flaw exists within ZENworks Preboot Policy Service, which listens on port 13331. The vulnerability is in the logging functionality, which copies attacker provided data into a fixed size stack buffer. An attacker could leverage this to execute arbitrary code as the local user __z_0_1__, which has Administrator privileges.
Novell has issued an update to correct this vulnerability. More details can be found at: