[security bulletin] HPSBMU03073 rev.1 - HP Network Virtualization, Remote Execution of Code, Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04374202 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04374202 Version: 1 HPSBMU03073 rev....

CVE-2014-2626

Directory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6 aka Shunra Network Virtualization allows remote attackers to create files, and consequently execute arbitrary code, via crafted input, aka ZDI-CAN-2024...

CVE-2014-2626

Directory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6 aka Shunra Network Virtualization allows remote attackers to create files, and consequently execute arbitrary code, via crafted input, aka ZDI-CAN-2024...

CVE-2014-2626

CVE-2014-2626 affects HP Network Virtualization / Shunra Network Virtualization 8.6. The vulnerability is in the toServerObject function, caused by insufficient input validation that enables directory traversal. An unauthenticated remote attacker can craft HTTP requests to write arbitrary files (...