CVE-2013-2367

Related Files

HP SiteScope Remote Code Execution

Posted Sep 9, 2013

Authored by rgod, juan vazquez | Site metasploit.com

This Metasploit module exploits a code execution flaw in HP SiteScope. The vulnerability exists on the opcactivate.vbs script, which is reachable from the APIBSMIntegrationImpl AXIS service, and uses WScript.Shell.run() to execute cmd.exe with user provided data. Note which the opcactivate.vbs component is installed with the (optional) HP Operations Agent component. The module has been tested successfully on HP SiteScope 11.20 (with HP Operations Agent) over Windows 2003 SP2.

tags | exploit, shell, code execution

systems | windows

advisories | CVE-2013-2367, OSVDB-95824

SHA-256 | 02888ebdda6dc97a16fcb507f825f9cfbf26bc98824bc1efc03e5b0ff9d28b2f

Download | Favorite | View

HP Security Bulletin HPSBGN02904

Posted Jul 30, 2013

Authored by HP | Site hp.com

HP Security Bulletin HPSBGN02904 - Potential security vulnerabilities have been identified with HP SiteScope running SOAP. The vulnerabilities could be remotely exploited to allow execution of code. Revision 1 of this advisory.

tags | advisory, vulnerability

advisories | CVE-2013-2367

SHA-256 | 2478f00abd186500bf4ec557873ea4be1a0c4be699444916f74a1abfffb67c68

Download | Favorite | View