CVE-2014-0602: Code Injection
Published Jul 7, 2014
·Updated
Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in NetIQ Security Manager through 6.5.4 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3460.
Affected Software
1 affected component
Microfocus Security Manager<=6.5.4
Event History
Jul 7, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-0602?
CVE-2014-0602 is classified as a high-severity vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2014-0602?
To remediate CVE-2014-0602, update to a version of NetIQ Security Manager newer than 6.5.4.
3
Who is affected by CVE-2014-0602?
CVE-2014-0602 affects users of NetIQ Security Manager versions up to and including 6.5.4.
4
What type of vulnerability is CVE-2014-0602?
CVE-2014-0602 is a directory traversal vulnerability in the DumpToFile method.
5
Can CVE-2014-0602 be exploited remotely?
Yes, CVE-2014-0602 can be exploited by remote attackers to execute arbitrary code.