Heap-based buffer overflow in novell-tftp.exe in Novell ZENworks Configuration Manager (ZCM) 10.3.1 10.3.2 and 11.0 and earlier versions allows remote attackers to execute arbitrary code via a long TFTP request.