what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

OSVDB: OSVDB-97154

HP ProCurve Manager SNAC UpdateDomainControllerServlet File Upload

Posted Sep 17, 2013

Authored by rgod, juan vazquez | Site metasploit.com

This Metasploit module exploits a path traversal flaw in the HP ProCurve Manager SNAC Server. The vulnerability in the UpdateDomainControllerServlet allows an attacker to upload arbitrary files, just having into account binary writes aren't allowed. Additionally, authentication can be bypassed in order to upload the file. This Metasploit module has been tested successfully on the SNAC server installed with HP ProCurve Manager 4.0.

tags | exploit, arbitrary

advisories | CVE-2013-4811, OSVDB-97154

SHA-256 | c9ac22deeaaeec7f4f88fb2108052d3e62513624019a0ece3319ace029dc61b8

Download | Favorite | View