HP Network Virtualization storedNtxFile Directory Traversal (CVE-2014-2625)

A directory traversal vulnerability exists in HP Network Virtualization software. The vulnerability is due to insufficient input validation of user parameters passed to "storedNtxFile" method. A remote, unauthenticated attacker can leverage this vulnerability to gain access to sensitive informati...

[security bulletin] HPSBMU03073 rev.1 - HP Network Virtualization, Remote Execution of Code, Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04374202 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04374202 Version: 1 HPSBMU03073 rev....

CVE-2014-2625

Directory traversal vulnerability in the storedNtxFile function in HP Network Virtualization 8.6 aka Shunra Network Virtualization allows remote attackers to read arbitrary files via crafted input, aka ZDI-CAN-2023...

CVE-2014-2625

Affected product/Version: HP Network Virtualization 8.6 (Shunra Network Virtualization). Vulnerability: storedNtxFile directory traversal due to insufficient input validation, enabling a remote, unauthenticated attacker to read arbitrary files on the vulnerable system. Root cause: improper saniti...