Vulnerability in Netiq Identity Manager

CVE-2006-4803

The Fan-Out Linux and UNIX receiver scripts in Novell Identity Manager (IDM) 3.0.1 allows local users to execute arbitrary commands via unspecified vectors involving certain environment variables and "code injection."

EPSS: 0.005 (39.6th percentile) — read the EPSS interpretation.

Affected products

Netiq Identity_manager — versions 3.0.1
N/a — versions n/a

References

cve@mitre.org (Third Party Advisory, vdb-entry, x_refsource_VUPEN)
cve@mitre.org (x_refsource_CONFIRM, Patch)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (Patch, VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)