HP LeftHand Virtual SAN Appliance Multiple Remote Arbitrary Code Execution Vulnerabilities

Bugtraq ID:	57754
Class:	Unknown
CVE:	CVE-2012-3282 CVE-2012-3283 CVE-2012-3284 CVE-2012-3285
Remote:	Yes
Local:	No
Published:	Feb 05 2013 12:00AM
Updated:	Feb 13 2013 01:01PM
Credit:	e6af8de8b1d4b2b6d5ba2610cbf9cd38 via TippingPoint's Zero Day Initiative
Vulnerable:
Not Vulnerable:

HP LeftHand Virtual SAN Appliance Multiple Remote Arbitrary Code Execution Vulnerabilities

HP LeftHand Virtual SAN Appliance is prone to multiple remote code-execution vulnerabilities.

An attacker can exploit these issues to execute arbitrary code in the context of the root user. Failed exploit attempts will likely result in denial-of-service conditions.

Versions prior to HP LeftHand Virtual SAN Appliance 10.0 are vulnerable.

HP LeftHand Virtual SAN Appliance Multiple Remote Arbitrary Code Execution Vulnerabilities

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP LeftHand Virtual SAN Appliance Multiple Remote Arbitrary Code Execution Vulnerabilities

Solution:
Updates are available. Please see the references for details.

HP LeftHand Virtual SAN Appliance Multiple Remote Arbitrary Code Execution Vulnerabilities

References:

• HP Homepage (HP)