CVE-2015-0786: Stack-based buffer overflow in the logging functionality in the Preboot Policy service in Novell ZENworks C...

Security readout for executives and security teams

CVE-2015-0786 is a remote code execution issue in Novell ZENworks Configuration Management's Preboot Policy service. The public bundle says the flaw is a stack-based buffer overflow in logging. Business risk is highest where this service is reachable on management or deployment networks. The bundle does not identify affected versions, a patch level, or active exploitation. Likely exposure is limited to organizations running Novell ZENworks Configuration Management with the Preboot Policy service enabled and reachable. The supplied affected-products metadata is incomplete, so exact version exposure cannot be confirmed from this bundle alone. Treat as a high-priority legacy infrastructure risk if ZCM is still in use. The potential impact is serious because remote code execution is described, but urgency depends on whether the Preboot Policy service is deployed and reachable. Mitigation focus: Review Novell KB 7016431 and ZDI-15-153 for vendor-confirmed affected versions and fixes.; Apply only vendor-confirmed ZCM updates or workarounds applicable to your deployed version.; Restrict network reachability to the Preboot Policy service to trusted management segments..

Prepared

Jun 12, 2026, 21:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.