CVE-2012-5932

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

62.75%

Published

Dec 24, 2012

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

Exploit-DBNetIQ Privileged User Manager 2.3.1 - 'ldapagnt_eval()' Perl Remote Code Execution (Metasploit)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote attackers to execute arbitrary Perl code via a crafted application/x-amf request.

Weaknesses (CWE)

CWE-94

Affected Products (2)

microfocus · privileged_user_managervulnerable

References (8)

http://download.novell.com/Download?buildid=K6-PmbPjduA~

http://retrogod.altervista.org/9sg_novell_netiq_ii.htm

Exploit

http://retrogod.altervista.org/9sg_novell_netiq_ldapagnt_adv.htm

Exploit

https://www.netiq.com/support/kb/doc.php?id=7011385

Vendor Advisory

http://download.novell.com/Download?buildid=K6-PmbPjduA~

http://retrogod.altervista.org/9sg_novell_netiq_ii.htm

Exploit

http://retrogod.altervista.org/9sg_novell_netiq_ldapagnt_adv.htm

Exploit

https://www.netiq.com/support/kb/doc.php?id=7011385

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs