CVE-2010-4323: Novell Zenworks Configuration Manager

High severity, CVSS 7.5. EPSS: 8.1% chance of exploitation in the next 30 days.

Heap-based buffer overflow in novell-tftp.exe in Novell ZENworks Configuration Manager (ZCM) 10.3.1, 10.3.2, and 11.0, and earlier versions, allows remote attackers to execute arbitrary code via a long TFTP request.

Affected products

• Novell Zenworks Configuration Manager: up to and including 11.0; version 10.3.1 only; version 10.3.2 only

Published 2011-02-19. Last modified 2026-06-16.