HP ProCurve Manager SNAC UpdateDomainControllerServlet Code Execution (CVE-2013-4811)

A vulnerability has been reported in HP ProCurve Manager SNAC...

HP PCM+ SNAC Registration Server UpdateDomainControllerServlet File Upload

File upload vulnerability in HP PCM+ SNAC Registration Server UpdateDomainControllerServlet Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

CVE-2013-4811

UpdateDomainControllerServlet in the SNAC registration server in HP ProCurve Manager PCM 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager IDM 4.0 does not properly validate the adCert argument, which allows remote attackers to upload .jsp files and consequently execute arbitrary code...

HP ProCurve Manager SNAC UpdateDomainControllerServlet File Upload

This module exploits a path traversal flaw in the HP ProCurve Manager SNAC Server. The vulnerability in the UpdateDomainControllerServlet allows an attacker to upload arbitrary files, just having into account binary writes aren't allowed. Additionally, authentication can be bypassed in order to...

HP PCM+ SNAC Registration Server UpdateDomainControllerServlet Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP PCM Plus. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UpdateDomainControllerServlet. This servlet improperly sanitizes the 'adCert' argument...