CVSS: 10.0EPSS: 52%CPEs: 2EXPL: 3CVE-2012-5932 – NetIQ Privileged User Manager 2.3.1 - 'ldapagnt_eval()' Perl Remote Code Execution
https://notcve.org/view.php?id=CVE-2012-5932
Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote attackers to execute arbitrary Perl code via a crafted application/x-amf request. Una vulnerabilidad de inyección de Eval en la función ldapagnt_eval en ldapagnt.dll en unifid.exe en NetIQ Privileged User Manager v2.3.x antes de v2.3.1 HF2 permite a atacantes remotos ejecutar código Perl de su elección a través una solicitud application/x-amf hecha a mano. • https://www.exploit-db.com/exploits/22903 http://download.novell.com/Download?buildid=K6-PmbPjduA~ http://retrogod.altervista.org/9sg_novell_netiq_ii.htm http://retrogod.altervista.org/9sg_novell_netiq_ldapagnt_adv.htm https://www.netiq.com/support/kb/doc.php?id=7011385 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 1CVE-2012-5931 – Novell NetIQ Privileged User Manager 2.3.1 - 'auth.dll' pa_modify_accounts() Remote Code Execution
https://notcve.org/view.php?id=CVE-2012-5931
Directory traversal vulnerability in the set_log_config function in regclnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote authenticated users to create or overwrite arbitrary files via directory traversal sequences in a log pathname. Vulnerabilidad de salto de directorio en la función set_log_config en regclnt.dll en unifid.exe en NetIQ Privileged User Manager v2.3.x antes de v2.3.1 HF2 permite a usuarios remotos autenticados crear o sobreescribir archivos de su elección a través de secuencias de recorrido de directorio con un nombre de ruta de un fichero de log. • https://www.exploit-db.com/exploits/22737 http://download.novell.com/Download?buildid=K6-PmbPjduA~ http://retrogod.altervista.org/9sg_novell_netiq_i_adv.htm https://www.netiq.com/support/kb/doc.php?id=7011385 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 6.4EPSS: 1%CPEs: 2EXPL: 3CVE-2012-5930 – Novell NetIQ Privileged User Manager 2.3.1 - 'auth.dll' pa_modify_accounts() Remote Code Execution
https://notcve.org/view.php?id=CVE-2012-5930
The pa_modify_accounts function in auth.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 does not require authentication for the modifyAccounts method, which allows remote attackers to change the passwords of administrative accounts via a crafted application/x-amf request. La función pa_modify_accounts en auth.dll en unifid.exe en NetIQ Privileged User Manager v2.3.x antes de v2.3.1 HF2 no requiere autenticación para el método modifyAccounts, lo que permite a atacantes remotos cambiar las contraseñas de cuentas administrativas a través de una petición application/x-amf hecha a mano. • https://www.exploit-db.com/exploits/22737 http://download.novell.com/Download?buildid=K6-PmbPjduA~ http://retrogod.altervista.org/9sg_novell_netiq_i.htm http://retrogod.altervista.org/9sg_novell_netiq_i_adv.htm https://www.netiq.com/support/kb/doc.php?id=7011385 • CWE-287: Improper Authentication •
CVSS: 5.0EPSS: 3%CPEs: 1EXPL: 4CVE-2008-7127
https://notcve.org/view.php?id=CVE-2008-7127
osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to cause a denial of service (crash) via a crafted packet with a large string length value to UDP port 14000, which triggers a memory allocation failure that is not properly handled. osagent.exe en Borland VisiBroker Smart Agent v08.00.00.C1.03 y anteriores permite a atacantes remotos provocar una denegación de servicio (caída) a través de una paquete manipulado con una logitus de cadena larga al puerto UDP 14000, lo que provoca una fallo de localización de memoria que no se gestiona de forma adecuada. • http://aluigi.altervista.org/adv/visibroken-adv.txt http://archives.neohapsis.com/archives/fulldisclosure/2008-03/0018.html http://osvdb.org/43058 http://secunia.com/advisories/29213 http://www.securityfocus.com/bid/28084 http://www.vupen.com/english/advisories/2008/0748/references https://exchange.xforce.ibmcloud.com/vulnerabilities/40983 • CWE-399: Resource Management Errors •
CVSS: 10.0EPSS: 10%CPEs: 1EXPL: 4CVE-2008-7126 – Borland VisiBroker Smart Agent 08.00.00.C1.03 - Multiple Remote Vulnerabilities
https://notcve.org/view.php?id=CVE-2008-7126
Integer overflow in osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet with a large string length value to UDP port 14000, which triggers a heap-based buffer overflow. Desbordamiento de entero en osagent.exe en Borland VisiBroker Smart Agent 08.00.00.C1.03 y anteriores, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente la ejecución de código de su elección a través de un paquete manipulado un valor de longitud de cadena larga al puerto UDP 14000 que provoca un desbordamiento de búfer basado en memoria dinámica (heap). • https://www.exploit-db.com/exploits/31330 http://aluigi.altervista.org/adv/visibroken-adv.txt http://archives.neohapsis.com/archives/fulldisclosure/2008-03/0018.html http://osvdb.org/43057 http://secunia.com/advisories/29213 http://www.securityfocus.com/bid/28084 http://www.vupen.com/english/advisories/2008/0748/references https://exchange.xforce.ibmcloud.com/vulnerabilities/40978 • CWE-189: Numeric Errors •