HP AutoPass License Server Remote Code Execution (HPSBMU03045)

The HP AutoPass License Server has a flaw in the 'CommunicationServlet' that allows a remote, unauthenticated attackers to place files at arbitrary locations on the system by utilizing a directory traversal string. A remote attacker could use this issue to execute arbitrary code with 'SYSTEM'...

HP AutoPass License Server - Arbitrary File Upload (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'HP AutoPass License Server File Upload', 'Description' = %q This module exploits a code execution flaw in HP AutoPass License Server...

Directory traversal

Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server is enabled, allows remote attackers to create arbitrary files and consequently execute arbitrary code via unspecified vectors, aka ZDI-CAN-2031...

CVE-2013-6221

The CVE-2013-6221 vulnerability affects HP Service Virtualization (3.x) with AutoPass License Server enabled. A directory traversal flaw in CommunicationServlet allows remote attackers to create arbitrary files and potentially execute arbitrary code via unspecified vectors. Public references docu...

CVE-2013-6221: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server is enabled, allows remote attackers to create arbitrary files and consequently execute arbitrary code via unspecified vectors, aka ZDI-CAN-2031...

HP Service Virtualization code execution

Code execution via AutoPass License Server...

[security bulletin] HPSBMU03045 rev.1 - HP Service Virtualization Running AutoPass License Server, Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04333125 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04333125 Version: 1 HPSBMU03045 rev....

PT-2014-3064

Name of the Vulnerable Software and Affected Versions HP Service Virtualization versions 3.x before 3.50.1 Description A directory traversal issue in the CommunicationServlet of HP Service Virtualization allows remote attackers to create arbitrary files, potentially leading to the execution of...

Hewlett-Packard AutoPass License Server Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard AutoPass License Server. Authentication is not required to exploit this vulnerability. The flaw exists within the CommunicationServlet. The specific flaw is a directory traversal...

HP AutoPass License Server File Upload

This module exploits a code execution flaw in HP AutoPass License Server. It abuses two weaknesses in order to get its objective. First, the AutoPass application doesn't enforce authentication in the CommunicationServlet component. Second, it's possible to abuse a directory traversal when uploadi...