CVE-2011-3176

CVE-2011-3176 describes a critical stack-based buffer overflow vulnerability in the Preboot Service of Novell ZENworks Configuration Management (ZCM) versions 11.1 and 11.1a. This flaw allows unauthenticated remote attackers to execute arbitrary code on affected systems by sending a specially crafted opcode 0x4c request. With a CVSS score of 10.0, this vulnerability presents the highest possible severity, indicating complete compromise of confidentiality, integrity, and availability with low attack complexity. While not listed in CISA's KEV catalog, exploit code is publicly available via Metasploit and ExploitDB, demonstrating its exploitability. Despite the high severity and public exploit, there is no recorded community discussion or media coverage, suggesting a lack of widespread public awareness or active exploitation in the wild.