Description
The Fan-Out Linux and UNIX receiver scripts in Novell Identity Manager (IDM) 3.0.1 allows local users to execute arbitrary commands via unspecified vectors involving certain environment variables and "code injection."
References
- ADV-2006-3607 vdb-entry
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974421.htm
- 21888 third-party-advisory
- 1016853 vdb-entry
- 20016 vdb-entry