EUVD-2014-0633

Malware in sbrugna...

CVE-2014-0602: Improper Control of Generation of Code

Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in NetIQ Security Manager through 6.5.4 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3460...

CVE-2014-3460: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in Agent Manager in NetIQ Sentinel allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted pathname...

PT-2014-5339

Name of the Vulnerable Software and Affected Versions NetIQ Sentinel affected versions not specified Description The issue allows remote attackers to create arbitrary files and consequently execute arbitrary code via a crafted pathname in the DumpToFile method in the NQMcsVarSet ActiveX control i...