iDefense Security Advisory 12.01.06 – Remote exploitation of an integer overflow vulnerability in Novell Inc.’s ZENworks Asset Management could potentially allow an attacker to execute arbitrary code with SYSTEM privileges on Windows or root on the various supported UNIX based operating systems. A heap overflow may occur when processing specially crafted packets sent to the Collection Client daemon. The root cause of this vulnerability is identical to that of the vulnerability in Msg.dll. For more information please consult the Msg.dll advisory. iDefense has confirmed the existence of this vulnerability in version 7.0.0.36 of the CClient.exe and Msg.dll files included with Novell Inc’s ZENworks Asset Management 7.0 SP1. Older versions are suspected to be vulnerable as well.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/52741/12.01.06-1.txt
Source: https://packetstormsecurity.com/files/52741/iDEFENSE-Security-Advisory-2006-12-01.1.html