Sun Java System Identity Manager (IdM) 7.0 through 8.0 on Linux AIX Solaris and HP-UX permits \control characters\ in the passwords of user accounts which allows remote attackers to execute arbitrary commands via vectors involving \resource adapters.\