CVE-2012-5932

This Metasploit module exploits a lack of authorization in NetIQ Privileged User Manager's ldapagnt_eval() function to execute arbitrary Perl code, leading to remote code execution with SYSTEM privileges on Windows 2003 SP2.

This Metasploit module exploits a lack of authorization in NetIQ Privileged User Manager's ldapagnt module to execute arbitrary Perl code, leading to remote code execution with SYSTEM privileges. It uses a fake login request to trigger the vulnerability and delivers a payload via an HTTP server.