CVE-2012-5930

This exploit demonstrates a pre-authentication remote code execution vulnerability in Novell NetIQ Privileged User Manager 2.3.1. It leverages a flaw in the `pa_modify_accounts()` function within `auth.dll` to change the admin password without authentication, then uses a post-authentication flaw in `set_log_config()` to write arbitrary files and achieve SYSTEM-level command execution.