HP Virtual Server Environment Arbitrary File Download Vulnerability
BID:44428
Info
HP Virtual Server Environment Arbitrary File Download Vulnerability
| Bugtraq ID: | 44428 |
| Class: | Input Validation Error |
| CVE: |
CVE-2010-3990 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 26 2010 12:00AM |
| Updated: | Oct 26 2010 12:00AM |
| Credit: | HP |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
HP Virtual Server Environment Arbitrary File Download Vulnerability
HP Virtual Server Environment is prone to a vulnerability that lets attackers download arbitrary files.
Exploiting this issue will allow an attacker to view arbitrary files within the context of the application. Information harvested may aid in launching further attacks.
The issue affects HP Virtual Server Environment versions prior to 6.2
HP Virtual Server Environment is prone to a vulnerability that lets attackers download arbitrary files.
Exploiting this issue will allow an attacker to view arbitrary files within the context of the application. Information harvested may aid in launching further attacks.
The issue affects HP Virtual Server Environment versions prior to 6.2
Exploit / POC
HP Virtual Server Environment Arbitrary File Download Vulnerability
An attacker can exploit this issue via a browser.
An attacker can exploit this issue via a browser.
Solution / Fix
HP Virtual Server Environment Arbitrary File Download Vulnerability
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.