CVE-2012-5932: Code Injection
Published Dec 24, 2012
·Updated
Eval injection vulnerability in the ldapagnteval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote attackers to execute arbitrary Perl code via a crafted application/x-amf request.
Affected Software
2 affected components
MicroFocus Privileged User Manager=2.3.0
MicroFocus Privileged User Manager=2.3.1
Event History
Dec 24, 2012
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-5932?
CVE-2012-5932 is considered a high severity vulnerability due to its ability to allow remote code execution.
2
How do I fix CVE-2012-5932?
To fix CVE-2012-5932, update to NetIQ Privileged User Manager version 2.3.1 HF2 or later.
3
What type of attack does CVE-2012-5932 facilitate?
CVE-2012-5932 facilitates remote code execution attacks through crafted application/x-amf requests.
4
Which software versions are affected by CVE-2012-5932?
CVE-2012-5932 affects NetIQ Privileged User Manager versions 2.3.0 and 2.3.1 prior to HF2.
5
Is CVE-2012-5932 exploitable from the internet?
Yes, CVE-2012-5932 is exploitable remotely, making it a significant risk if vulnerable systems are exposed to the internet.