Lucene search
HistorySep 14, 2006 - 10:07 p.m.
CVE-2006-4803
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.2
Confidence
Low
EPSS
0
Percentile
5.1%
The Fan-Out Linux and UNIX receiver scripts in Novell Identity Manager (IDM) 3.0.1 allows local users to execute arbitrary commands via unspecified vectors involving certain environment variables and “code injection.”
Affected configurations
Node
netiqidentity_managerMatch3.0.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| netiq | identity_manager | 3.0.1 | cpe:2.3:a:netiq:identity_manager:3.0.1:*:*:*:*:*:*:* |
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.2
Confidence
Low
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2006-4803