Skip to content
Vulnerability Intelligence

CVE-2005-1543

HighPublic exploit

Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENworks 6.5 Desktop and Server Management, ZENworks for Desktops 4.x, ZENworks for Servers 3.x, and Remote Management allows remote attackers to execute arbitrary…

Published May 25, 2005 · Updated Apr 15, 2026

Key Facts

Patch immediately
  • CVE-2005-1543 is a high-severity vulnerability (CVSS 7.5 v2) affecting Zenworks (Novell), Zenworks Desktops (Novell), Zenworks Remote Management (Novell) and 2 more products.
  • It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
  • EPSS estimates a 66% probability of exploitation in the next 30 days.
  • No fixed version is listed yet; check the vendor advisory for mitigations.
  • Brandefense priority: patch immediately, because it is very likely to be exploited soon.

CVSS v2

7.5

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS (30-day exploit likelihood)

66%

Higher than 99.2% of all scored CVEs

Exploited in the wild

No known

Not in a known-exploited catalog

Public exploit code

Available

Proof-of-concept or weaponized module

Get the full CVE-2005-1543 brief as a PDF

Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.

Description

Multiple stack-based and heap-based buffer overflows in Remote Management authentication (zenrem32.exe) on Novell ZENworks 6.5 Desktop and Server Management, ZENworks for Desktops 4.x, ZENworks for Servers 3.x, and Remote Management allows remote attackers to execute arbitrary code via (1) unspecified vectors, (2) type 1 authentication requests, and (3) type 2 authentication requests.

Affected Products

7 affected entries in total
ProductAffected versionsFixed in
ZenworksNovell6.5n/a
Zenworks DesktopsNovell3.2-sp2, 4.0, 4.0.1n/a
Zenworks Remote ManagementNovellSee advisoryn/a
Zenworks Server ManagementNovell6.5n/a
Zenworks ServersNovell3.2n/a

Timeline

  1. Publicly disclosed

    May 25, 2005

  2. Last updated

    Apr 15, 2026

References

8 more references in the full CVE brief

FAQ

Common Questions.

Is CVE-2005-1543 Running On Your Attack Surface?

Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.

Request A Demo