CVE-2007-5665: STEngine.exe 3.5.0.20 in Novell ZENworks Endpoint Security Management (ESM) 3.5, and other ESM versions bef...

Security readout for executives and security teams

This is a local privilege escalation in legacy Novell ZENworks Endpoint Security Management. A local user could abuse diagnostic report handling because STEngine.exe creates scripts in a directory writable by ordinary users. The issue matters most on endpoints where untrusted users can log in locally. Exposure is limited to systems running Novell ZENworks Endpoint Security Management versions before 3.5.0.82. Risk is higher where standard users have local access to managed endpoints and diagnostic report generation is available. Treat this as a high-priority legacy endpoint remediation issue, not an internet-facing emergency. Prioritize environments where ordinary users can log into machines running affected ZENworks ESM versions. Mitigation focus: Inventory Novell ZENworks ESM installations and identify versions before 3.5.0.82.; Upgrade affected ESM deployments to 3.5.0.82 or later if supported by vendor guidance.; Restrict diagnostic report generation to trusted administrators until remediation is complete..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.