Directory traversal

Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in NetIQ Security Manager through 6.5.4 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3460...

CVE-2014-3460

Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in Agent Manager in NetIQ Sentinel allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted pathname...

CVE-2014-3460

Summary (CVE-2014-3460): A directory traversal vulnerability in the DumpToFile method of the NQMcsVarSet ActiveX control (Agent Manager component of NetIQ Sentinel) allows remote attackers to create arbitrary files and potentially execute code via a crafted pathname. Affected products/versions in...