HP Remote Watch Showdisk Command Execution Vulnerability
BID:6698
Info
HP Remote Watch Showdisk Command Execution Vulnerability
| Bugtraq ID: | 6698 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Jun 11 1996 12:00AM |
| Updated: | Jun 11 1996 12:00AM |
| Credit: | This issue was announced in a HP Security Bulletin. |
| Vulnerable: |
HP Remote Watch |
| Not Vulnerable: | |
Discussion
HP Remote Watch Showdisk Command Execution Vulnerability
The showdisk utility included with HP Remote Watch may allow local attackers to cause arbitrary commands to be executed with elevated privileges.
When the showdisk utility is executed, it tries to open the 'bdf' utility, but an absolute path to the file is not specified. As a result, a local attacker may create a malicious executable called 'bdf', set their PATH environment variable so that the directory containing the malicious 'bdf' is searched before the actual location of the legitimate utility.
This will allow the attacker to execute arbitrary commands with elevated privileges.
The showdisk utility included with HP Remote Watch may allow local attackers to cause arbitrary commands to be executed with elevated privileges.
When the showdisk utility is executed, it tries to open the 'bdf' utility, but an absolute path to the file is not specified. As a result, a local attacker may create a malicious executable called 'bdf', set their PATH environment variable so that the directory containing the malicious 'bdf' is searched before the actual location of the legitimate utility.
This will allow the attacker to execute arbitrary commands with elevated privileges.
Exploit / POC
HP Remote Watch Showdisk Command Execution Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
HP Remote Watch Showdisk Command Execution Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
HP Remote Watch Showdisk Command Execution Vulnerability
References:
References: