CVE-2012-5931

Directory traversal vulnerability in the setlogconfig function in regclnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote authenticated users to create or overwrite arbitrary files via directory traversal sequences in a log pathname...

NetIQ Privileged User Manager regclnt.dll Directory Traversal

According to the self-reported version of the NetIQ Privileged User Manager 'registry agent' package, the NetIQ Privileged User Manager 'setlogconfig' function in regclnt.dll is affected by a directory traversal flaw that can be exploited to read or write arbitrary files by sending a specially...

CVE-2012-5931

CVE-2012-5931 is a directory traversal vulnerability affecting NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2. The flaw exists in the set_log_config function of regclnt.dll (unifid.exe) and allows remote authenticated users to create or overwrite arbitrary files via crafted log pathnames. I...