idmlib.sh in nxdrv in Novell Identity Manager (IDM) 3.0.1 allows local users to execute arbitrary commands via unspecified vectors possibly involving the \ (quote) and \\ (backslash) characters and eval injection.