PT-2006-5306 · Novell · Novell Identity Manager

Publicado 2006-08-31 · Atualizado 2018-09-27 · CVE-2006-4506

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Novell Identity Manager (IDM) version 3.0.1

Description The issue allows local users to execute arbitrary commands, possibly involving the use of quote and backslash characters and eval injection in the idmlib.sh script within the nxdrv component.

Recommendations For Novell Identity Manager (IDM) version 3.0.1, consider restricting access to the idmlib.sh script to prevent local users from executing arbitrary commands until a patch is available. Avoid using the quote and backslash characters in the script to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-2006-4506

Produtos afetados

Novell Identity Manager

Referências · 4

• 🔥 http://securityfocus.com/bid/19688 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-4506 · Nota de Segurança
• http://securitytracker.com/id?1016741 · Correção
• http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974299.htm · Nota