CVE-2010-4323: Heap-based buffer overflow in novell-tftp.exe in Novell ZENworks Configuration Manager (ZCM) 10.3.1, 10.3.2...

Security readout for executives and security teams

This issue affects the TFTP service bundled with Novell ZENworks Configuration Manager. A specially long TFTP request can overflow heap memory in novell-tftp.exe and may let a remote attacker run code. Treat it as serious wherever old ZCM servers are still operating or reachable. Exposure is limited to environments still running affected Novell ZCM versions with the TFTP component enabled, especially if reachable from user networks or the internet. Modern environments may only have exposure through legacy management infrastructure. Prioritize remediation if legacy ZENworks servers remain in production or reachable across broad networks. The business risk is remote server compromise of management infrastructure, but urgency depends on confirmed deployment and exposure. Mitigation focus: Check Novell support advisory 7007896 for vendor-approved fixes or workarounds.; Upgrade or retire affected ZCM versions if vendor guidance confirms a fixed release.; Restrict TFTP service access to required management networks only..

Prepared

Jun 27, 2026, 18:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.