CVE-2012-5932: Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privilege...

Security readout for executives and security teams

This flaw affects NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2. A remote attacker could send a crafted AMF request that causes the product to run arbitrary Perl code. Because the product manages privileged access, compromise could create serious operational and security impact. Exposure is likely limited to organizations still running NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2, especially where the affected unifid service is reachable by untrusted networks. Treat this as a high-priority legacy exposure check. The vulnerability enables remote code execution in a privileged-access management product, but urgency depends on whether vulnerable 2.3.x systems remain deployed and reachable. Mitigation focus: Upgrade NetIQ Privileged User Manager to 2.3.1 HF2 or later.; Review NetIQ and Novell guidance linked in the CVE references.; Restrict network access to affected Privileged User Manager services until patched..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.