NetIQ Privileged User Manager regclnt.dll Directory Traversal

According to the self-reported version of the NetIQ Privileged User Manager 'registry agent' package, the NetIQ Privileged User Manager 'setlogconfig' function in regclnt.dll is affected by a directory traversal flaw that can be exploited to read or write arbitrary files by sending a specially...

CVE-2012-5931

CVE-2012-5931 is a directory traversal vulnerability affecting NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2. The flaw exists in the set_log_config function of regclnt.dll (unifid.exe) and allows remote authenticated users to create or overwrite arbitrary files via crafted log pathnames. I...

Novell NetIQ Privileged User Manager 2.3.1 auth.dll Code Execution

Novell NetIQ Privileged User Manager version 2.3.1 suffers from a remote code execution vulnerability in pamodifyaccounts in auth.dll. The secure web interface contains a flaw which allows, without prior authentication, to change the password of the user 'admin'. A remote attacker then could logi...