ZENworks rogue process management allows any .exe to run if renamed to explorer.exe

  • Document ID:3266830
  • Creation Date:09-Sep-2006
  • Modified Date:25-May-2012
    • Micro Focus Products:
      ZENworks Desktop Management

Environment

Novell ZENworks 6.5 Desktop Management - ZfD6.5
Novell Application Launcher (NAL)

Situation

ZENworks rogue process management allows any .exe to run if renamed to explorer.exe
ZENworks rpm is allowing executables to run if renamed to explorer.exe

Resolution

Fixed in NalAgent.exe dated 25 May 2005 or newer in ZDM 6.5 SP2 IR1 or newer found at https://www.novell.com/support

Additional Information

NAL should be checking the orig filename found in the properties if the executable file, but it does not when the file is renamed to explorer.exe.

Formerly known as TID# 10100603