HP SNMP Agents Unspecified URI Redirection Vulnerability

Bugtraq ID:	53340
Class:	Input Validation Error
CVE:	CVE-2012-2002
Remote:	Yes
Local:	No
Published:	May 02 2012 12:00AM
Updated:	May 02 2012 12:00AM
Credit:	HP
Vulnerable:	HP SNMP Agents 8.7.0 HP SNMP Agents 8.0
Not Vulnerable:	HP SNMP Agents 9.0.0

HP SNMP Agents Unspecified URI Redirection Vulnerability

HP SNMP Agents is prone to an open-redirection vulnerability because the application fails to properly sanitize user-supplied input.

A successful exploit may aid in phishing attacks; other attacks are possible.

HP SNMP Agents Unspecified URI Redirection Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.

HP SNMP Agents Unspecified URI Redirection Vulnerability

Solution:
Updates are available. Please see the references for more information.

HP SNMP Agents Unspecified URI Redirection Vulnerability

References:

• Micro News Homepage (phptoys)
  
• HPSBMU02771 SSRT100558 rev.1 - HP SNMP Agents for Linux, Remote Cross Site Scrip (HP)