{"vulnerability": "CVE-2012-2215", "sightings": [{"uuid": "cecdb7f9-e45e-438f-bd13-afb863bb4d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-2215", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:40.000000Z"}, {"uuid": "38bd2f37-2c8b-47a1-81b5-11ce756557f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-2215", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:04.000000Z"}, {"uuid": "bf1f23ab-3007-4554-b175-8648ab3a765a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-2215", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/novell/zenworks_preboot_op21_bof.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "b433a2e1-9120-47bb-b40f-90c9cc1851f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-2215", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/misc/zenworks_preboot_fileaccess.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "55258c98-34ad-43d4-abdb-577721511523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-2215", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/misc/zenworks_preboot_fileaccess.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Luigi Auriemma\", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a directory traversal in the ZENworks Configuration Management.\\n          The vulnerability exists in the Preboot service and can be triggered by sending a specially\\n          crafted PROXY_CMD_FTP_FILE (opcode 0x21) packet to the 998/TCP port. This module has been\\n          successfully tested on Novell ZENworks Configuration Management 10 SP2 and SP3 over Windows.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/misc/zenworks_preboot_fileaccess\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Novell ZENworks Configuration Management Preboot Service Remote File Access\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/misc/zenworks_preboot_fileaccess.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/misc/zenworks_preboot_fileaccess\", \"references\": [\"CVE-2012-2215\", \"OSVDB-80230\", \"URL-https://web.archive.org/web/20121103122235/http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=975\"], \"rport\": 998, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:01.240120Z"}, {"uuid": "63b4ce0b-0fa3-4aed-b32d-3ecebe4610f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-2215", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/novell/zenworks_preboot_op21_bof.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Stephen Fewer\", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a remote buffer overflow in the ZENworks Configuration\\n          Management 10 SP2. The vulnerability exists in the Preboot service and can be\\n          triggered by sending a specially crafted packet with the opcode 0x21\\n          (PROXY_CMD_FTP_FILE) to port 998/TCP. The module has been successfully tested on\\n          Novell ZENworks Configuration Management 10 SP2 and Windows Server 2003 SP2\\n          (DEP bypass).\", \"disclosure_date\": \"2010-03-30\", \"fullname\": \"exploit/windows/novell/zenworks_preboot_op21_bof\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Novell ZENworks Configuration Management Preboot Service 0x21 Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/novell/zenworks_preboot_op21_bof.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/novell/zenworks_preboot_op21_bof\", \"references\": [\"CVE-2012-2215\", \"OSVDB-65361\", \"BID-40486\", \"ZDI-10-090\", \"URL-http://www.novell.com/support/kb/doc.php?id=7005572\"], \"rport\": 998, \"session_types\": false, \"targets\": [\"Novell ZENworks Configuration Management 10 SP2 / Windows 2003 SP2\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:26.159749Z"}]}