RSS   Podatności dla 'Privileged user manager'   RSS

2012-12-24
 
CVE-2012-5932

 
 
Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote attackers to execute arbitrary Perl code via a crafted application/x-amf request.

 
 
CVE-2012-5931

 
 
Directory traversal vulnerability in the set_log_config function in regclnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote authenticated users to create or overwrite arbitrary files via directory traversal sequences in a log pathname.

 
 
CVE-2012-5930

 
 
The pa_modify_accounts function in auth.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 does not require authentication for the modifyAccounts method, which allows remote attackers to change the passwords of administrative accounts via a crafted application/x-amf request.

 

 >>> Vendor: Netiq 15 Produkty
Edirectory
Imanager
Pssecure
Identity manager
Access manager
Security manager
Sentinel
Privileged user manager
Sentinel agent manager
Security solutions for iseries
Self service password reset
Access governance suite
Sentinel server
Privileged account manager
Identity reporting

Copyright 2024, cxsecurity.com

 

Back to Top