Novell ZENworks AdminStudio LaunchHelp ActiveX Arbitrary Code Execution Exploit

This module allows remote attackers to place arbitrary files on a temporary folder in Novel ZENWorks AdminStudio, through a vulnerability in LaunchHelp.dll ActiveX Control (LaunchHelp.dll version 9.5.0.0). Code execution is achieved by uploading and executing a vbs script which then requests and executes Impact's binary agent.
CVE Link
CVE-2011-2657
Exploit Type - Old
Exploits/Client Side
Exploit Platform
Windows
Exploit Type
Exploits
Client Side
Product Name
Impact Professional