Multiple HP Products CVE-2013-4810 Remote Code Execution Vulnerabilities

Bugtraq ID:	62347
Class:	Unknown
CVE:	CVE-2013-4810
Remote:	Yes
Local:	No
Published:	Sep 10 2013 12:00AM
Updated:	May 12 2015 07:48PM
Credit:	Andrea Micalizzi aka rgod
Vulnerable:	HP ProCurve Manager Plus 4.00 HP ProCurve Manager Plus 3.20 HP ProCurve Manager 4.0 HP ProCurve Manager 3.20 HP Identity Driven Manager 4.0 HP Business Service Automation Essentials 9.2 HP Business Service Automation Essentials 9.1 HP Application Lifecycle Management 11
Not Vulnerable:

Multiple HP Products CVE-2013-4810 Remote Code Execution Vulnerabilities

Multiple HP products are prone to multiple remote code-execution vulnerabilities.

Successfully exploiting these issues may allow an attacker to execute arbitrary code with privileges of the user. Failed exploit attempts may result in a denial-of-service condition.

Note: These issues were previously discussed in BID 62301 (Multiple HP Products Multiple Unspecified Remote Security Vulnerabilities), but have been given their own record to better document them.

Multiple HP Products CVE-2013-4810 Remote Code Execution Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple HP Products CVE-2013-4810 Remote Code Execution Vulnerabilities

References:

• HP Homepage (HP)