CVE-2014-3460 | BDVDB-2026-61687 Detail

Description#

Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in Agent Manager in NetIQ Sentinel allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted pathname.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/58635
http://www.securitytracker.com/id/1030434
http://www.securityfocus.com/bid/67487
http://zerodayinitiative.com/advisories/ZDI-14-134/
http://www.novell.com/support/kb/doc.php?id=7015183

Exploit#

No public exploit known

History#

Version 12014-05-20Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.