CVE-2012-5932
NetIQ Privileged User Manager < 2.3.1 HF2 - Remote Code Execution via ldapagnt_eval Function
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-5932.
PoCs published by Metasploit, rgod, juan vazquez, including Metasploit module exploits/windows/novell/netiq_pum_eval.
AI-analyzed exploit summary This Metasploit module exploits a lack of authorization in NetIQ Privileged User Manager's ldapagnt_eval() function to execute arbitrary Perl code, leading to remote code execution with SYSTEM privileges on Windows 2003 SP2.
Description
Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote attackers to execute arbitrary Perl code via a crafted application/x-amf request.
Exploits (2)
This Metasploit module exploits a lack of authorization in NetIQ Privileged User Manager's ldapagnt_eval() function to execute arbitrary Perl code, leading to remote code execution with SYSTEM privileges on Windows 2003 SP2.
This Metasploit module exploits a lack of authorization in NetIQ Privileged User Manager's ldapagnt module to execute arbitrary Perl code, leading to remote code execution with SYSTEM privileges. It uses a fake login request to trigger the vulnerability and delivers a payload via an HTTP server.