Novell NetIQ Privileged User Manager 2.3.1 auth.dll Code Execution

newsbot

newsbot

RSS Feed
Novell NetIQ Privileged User Manager version 2.3.1 suffers from a remote code execution vulnerability in pa_modify_accounts() in auth.dll. The secure web interface contains a flaw which allows, without prior authentication, to change the password of the user 'admin'. A remote attacker then could login to the web interface with full privileges and trigger underlying vulnerabilities to write arbitrary files against the target system with SYSTEM privileges. Full exploit included.

Weiterlesen...
 

Ähnliche Themen

Novell NetIQ Privileged User Manager 2.3.1 ldapagnt.dll Code Execution

Webmin /file/show.cgi Remote Command Execution

Red Hat Security Advisory 2012-1555-01

Ubuntu Security Notice USN-1680-1

Samba 4 Gast Zugang unter Ubuntu funktioniert nicht

Zurück
Oben