HP Service Virtualization CVE-2013-6221 Unspecified Remote Code Execution Vulnerability

Bugtraq ID:	67989
Class:	Unknown
CVE:	CVE-2013-6221
Remote:	Yes
Local:	No
Published:	Jun 10 2014 12:00AM
Updated:	Aug 01 2014 12:32AM
Credit:	Andrea Micalizzi
Vulnerable:
Not Vulnerable:

HP Service Virtualization CVE-2013-6221 Unspecified Remote Code Execution Vulnerability

HP Service Virtualization is prone to an unspecified code-execution vulnerability.

Attackers can exploit this issue to execute arbitrary code in the context of the affected application.

Few technical details are currently available. We will update this BID as more information emerges.

HP Service Virtualization 3.0 and later are vulnerable.

HP Service Virtualization CVE-2013-6221 Unspecified Remote Code Execution Vulnerability

The following exploit is available:

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

• /data/vulnerabilities/exploits/67989.rb

HP Service Virtualization CVE-2013-6221 Unspecified Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

HP Service Virtualization CVE-2013-6221 Unspecified Remote Code Execution Vulnerability

References: