HP Insight Management Agents 'hmanics.snmp.php' Full Path Information Disclosure Vulnerability

Bugtraq ID:	45423
Class:	Unknown
CVE:	CVE-2010-4112
Remote:	Yes
Local:	No
Published:	Dec 15 2010 12:00AM
Updated:	May 23 2011 09:31PM
Credit:	Richard Brain of ProCheckUp Ltd and HP.
Vulnerable:	HP Insight Management Agents 8.5 HP Insight Management Agents 7.70.0.0
Not Vulnerable:	HP Insight Management Agents 8.6

HP Insight Management Agents 'hmanics.snmp.php' Full Path Information Disclosure Vulnerability

HP Insight Management Agents is prone to a remote information-disclosure vulnerability.

Remote attackers can exploit this issue to obtain sensitive information that may lead to further attacks.

Versions prior to HP Insight Management Agents 8.6 running on Linux and Windows are vulnerable.

HP Insight Management Agents 'hmanics.snmp.php' Full Path Information Disclosure Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

HP Insight Management Agents 'hmanics.snmp.php' Full Path Information Disclosure Vulnerability

References:

• Multiple XSS injection vulnerabilities and a offsite redirection flaw within HP (ProCheckUp Ltd)
  
• Vendor Homepage (Hewlett-Packard )
  
• HPSBMA02616 SSRT100231 rev.1 - HP Insight Management Agents Running on Linux and ([email protected])