NVD

Id
32491  
Name
CVE-2014-4509  
Description
The MKDQUOTESAFE function in the Fan-out driver scripts in Fan-Out Platform Services in Novell Identity Manager (aka IDM) 4.0.2 allows local users to execute arbitrary commands by leveraging eDirectory POSIX attribute changes to insert shell metacharacters.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-06-21  
Modified Date
2017-01-06  
Seq
2014-4509  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
171429 32491 CVE-2014-4509 http://download.novell.com/Download?buildid=5XLmBl54_Rg~  View
171430 32491 CVE-2014-4509 68139  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14130 JVNDB-2014-003005 Novell Identity Manager の Fan-Out Platform Services における任意のコマンドを実行される脆弱性 Novell Identity Manager (別名 IDM) の Fan-Out Platform Services の Fan-out ドライバスクリプト内の MKDQUOTESAFE 関数には、任意のコマンドを実行される脆弱性が存在します。 CVE-2014-4509 71797 CVE-2014-4509 32491 4.6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003005.html 2014-06-17 2014-06-24 View