CVEvulnerability
CVE-2006-4803
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-09-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
The Fan-Out Linux and UNIX receiver scripts in Novell Identity Manager (IDM) 3.0.1 allows local users to execute arbitrary commands via unspecified vectors involving certain environment variables and "code injection."
Affected configurations
• netiq identity manager 3.0.1
References
- http://secunia.com/advisories/21888 Vendor Advisory
- http://securitytracker.com/id?1016853 Third Party Advisory, VDB Entry
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974421.htm Patch
- http://www.securityfocus.com/bid/20016 Patch, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2006/3607 Third Party Advisory
- http://secunia.com/advisories/21888 Vendor Advisory
- http://securitytracker.com/id?1016853 Third Party Advisory, VDB Entry
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974421.htm Patch
- http://www.securityfocus.com/bid/20016 Patch, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2006/3607 Third Party Advisory