Lucene search
HpCVELIST:CVE-2013-4811HistorySep 13, 2013 - 6:00 p.m.
CVE-2013-4811
2013-09-1318:00:00
hp
www.cve.org
5
UpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 does not properly validate the adCert argument, which allows remote attackers to upload .jsp files and consequently execute arbitrary code via unspecified vectors, aka ZDI-CAN-1743.
Related
zdt
zdt
HP ProCurve Manager SNAC UpdateDomainControllerServlet File Upload
2013-09-17 00:00:00
prion
prion
Design/Logic Flaw
2013-09-16 13:01:00
zdi
zdi
dsquare
dsquare
HP PCM+ SNAC Registration Server UpdateDomainControllerServlet File Upload
2013-10-10 00:00:00
nvd
nvd
CVE-2013-4811
2013-09-16 13:01:46
packetstorm
packetstorm
HP ProCurve Manager SNAC UpdateDomainControllerServlet File Upload
2013-09-17 00:00:00
cve
cve
CVE-2013-4811
2013-09-16 13:01:46
metasploit
metasploit
HP ProCurve Manager SNAC UpdateDomainControllerServlet File Upload
2013-09-13 22:31:51
exploitdb
exploitdb
checkpoint_advisories
checkpoint_advisories
d2
d2
DSquare Exploit Pack: D2SEC_HPPCM2
2013-09-16 13:01:00
securityvulns
securityvulns
HP ProCurve Manager, HP Identity Driven Manager multiple security vulnerabilities
2013-09-11 00:00:00
HP ProCurve Manager multiple security vulnerabilities
2014-01-08 00:00:00