VulnerabilityModified
CVE-2006-4506
idmlib.sh in nxdrv in Novell Identity Manager (IDM) 3.0.1 allows local users to execute arbitrary commands via unspecified vectors, possibly involving the " (quote) and \ (backslash) characters and eval injection.
LOW 3.6EPSS 0.52%
Does this matter?
Lower severity and a low EPSS score (0.52%). Track it; it rarely justifies an emergency change on its own.
Description
idmlib.sh in nxdrv in Novell Identity Manager (IDM) 3.0.1 allows local users to execute arbitrary commands via unspecified vectors, possibly involving the " (quote) and \ (backslash) characters and eval injection.
- CVSS 2.0
- 3.6 LOWAV:L/AC:L/Au:N/C:P/I:P/A:N
- EPSS
- 0.52% probability · 43th percentile
- CISA KEV
- Not listed
- Affected
- netiq/identity manager
- Source
- cve@mitre.org
References
- http://securitytracker.com/id?1016741Patch
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974299.htmBroken Link
- http://www.securityfocus.com/bid/19688Exploit
- http://securitytracker.com/id?1016741Patch
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974299.htmBroken Link
- http://www.securityfocus.com/bid/19688Exploit
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.