CVE-2013-3576

Related Files

HP Security Bulletin HPSBMU02917

Posted Sep 18, 2013

Authored by HP | Site hp.com

HP Security Bulletin HPSBMU02917 - Potential security vulnerabilities have been identified with HP System Management Homepage (SMH) running on Linux and Windows. The vulnerabilities could be exploited remotely resulting in command execution and privilege gain. Revision 1 of this advisory.

tags | advisory, vulnerability

systems | linux, windows

advisories | CVE-2013-3576

SHA-256 | 0d1a08baa3a0a6ee30bc3c3edfb10cec8e27f810dae426c8b9cb3637abbbf8a5

Download | Favorite | View

HP System Management Homepage JustGetSNMPQueue Command Injection

Posted Jun 22, 2013

Authored by sinn3r, Markus Wulftange | Site metasploit.com

This Metasploit module exploits a vulnerability found in HP System Management Homepage. By supplying a specially crafted HTTP request, it is possible to control the 'tempfilename' variable in function JustGetSNMPQueue (found in ginkgosnmp.inc), which will be used in a exec() function. This results in arbitrary code execution under the context of SYSTEM. Please note: In order for the exploit to work, the victim must enable the 'tftp' command, which is the case by default for systems such as Windows XP, 2003, etc.

tags | exploit, web, arbitrary, code execution

systems | windows

advisories | CVE-2013-3576, OSVDB-94191

SHA-256 | 6266db27926cf39ef3e09f70d6ca685c96436473d8a501cfbd635527cd54d34c

Download | Favorite | View