CVE-2006-4803

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

The Fan-Out Linux and UNIX receiver scripts in Novell Identity Manager (IDM) 3.0.1 allows local users to execute arbitrary commands via unspecified vectors involving certain environment variables and "code injection."

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/21888Vendor Advisory
http://securitytracker.com/id?1016853Third Party Advisory, VDB Entry
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974421.htmPatch
http://www.securityfocus.com/bid/20016Patch, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2006/3607Third Party Advisory
http://secunia.com/advisories/21888Vendor Advisory
http://securitytracker.com/id?1016853Third Party Advisory, VDB Entry
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974421.htmPatch
http://www.securityfocus.com/bid/20016Patch, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2006/3607Third Party Advisory

Timeline

Published: Sep 14, 2006
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-48055.0epan/dissectors/packet-xot.c in the XOT dissector (dissect_xot_pdu) in Wireshark (formerly Ethereal) 0.9.8 through 0.99.3 allows remote atta CVE-2006-48065.1Multiple integer overflows in imlib2 allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrar CVE-2006-48072.6loader_tga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service (crash)CVE-2006-48082.6Heap-based buffer overflow in loader_tga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cau CVE-2006-48095.1Stack-based buffer overflow in loader_pnm.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to ca CVE-2006-48104.6Buffer overflow in the readline function in util/texindex.c, as used by the (1) texi2dvi and (2) texindex commands, in texinfo 4.8 and earli CVE-2006-48116.8Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possib CVE-2006-481210.0Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserializ CVE-2006-48132.1The __block_prepare_write function in fs/buffer.c for Linux kernel 2.6.x before 2.6.13 does not properly clear buffers during certain error CVE-2006-48144.6The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attac CVE-2006-48195.1Heap-based buffer overflow in Opera 9.0 and 9.01 allows remote attackers to execute arbitrary code via a long URL in a tag (long link addres CVE-2006-48202.1Unspecified vulnerability in X.25 on HP-UX B.11.00, B.11.11, and B.11.23 allows local users to cause an unspecified denial of service via un