Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveCertccCVE-2008-0952
HistoryJun 04, 2008 - 8:32 p.m.

CVE-2008-0952

2008-06-0420:32:00
certcc
web.nvd.nist.gov
24
cve-2008-0952
hp instant support
hpisdatamanager.dll
activex control
remote attackers
file creation

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

0.196

Percentile

96.3%

JSON

The AppendStringToFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to create files with arbitrary content via a full pathname in the first argument and the content in the second argument, a different vulnerability than CVE-2007-5608 and CVE-2008-0953.

Affected configurations

Nvd
Node
hpinstant_supportRange≀1.0.0.23
VendorProductVersionCPE
hpinstant_support*cpe:2.3:a:hp:instant_support:*:*:*:*:*:*:*:*

Related

prion 3
cve 2
nvd 3
cvelist 3
exploitdb 2
securityvulns 2
nessus 1
cert 8
seebug 1
prion
prion
Hardcoded credentials
2008-06-04 20:32:00
Design/Logic Flaw
2008-06-04 20:32:00
Design/Logic Flaw
2008-06-04 20:32:00
cve
cve
CVE-2007-5608
2008-06-04 20:32:00
CVE-2008-0953
2008-06-04 20:32:00
nvd
nvd
CVE-2008-0952
2008-06-04 20:32:00
CVE-2007-5608
2008-06-04 20:32:00
CVE-2008-0953
2008-06-04 20:32:00
cvelist
cvelist
CVE-2008-0952
2008-06-04 20:00:00
CVE-2007-5608
2008-06-04 20:00:00
CVE-2008-0953
2008-06-04 20:00:00
exploitdb
exploitdb
HP Instant Support 1.0.22 - 'HPISDataManager.dll' ActiveX Control Arbitrary File Creation
2008-06-03 00:00:00
HP Instant Support 1.0.22 - 'HPISDataManager.dll StartApp' ActiveX Control Insecure Method
2008-06-03 00:00:00
securityvulns
securityvulns
HP ActiveX code execution
2008-06-05 00:00:00
[security bulletin] HPSBMA02326 SSRT071490 rev.1 - HP Instant Support HPISDataManager.dll Running on Windows, Remote Execution of Arbitrary Code
2008-06-05 00:00:00
nessus
nessus
HP Instant Support HPISDataManager.dll ActiveX Control < 1.0.0.24 Vulnerabilities
2008-06-05 00:00:00
cert
cert
HP Online Support Services ActiveX ExtractCab() buffer overflow
2008-06-06 00:00:00
HP Online Support Services ActiveX StartApp() arbitrary code execution
2008-06-06 00:00:00
HP Online Support Services ActiveX DeleteSingleFile() arbitrary file deletion
2008-06-06 00:00:00
seebug
seebug
HP Instant Support HPISDataManager.dll ActiveXζŽ§δ»Άδ»»ζ„ζ–‡δ»ΆδΈ‹θ½½ζΌζ΄ž
2008-06-06 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

0.196

Percentile

96.3%

JSON
Related for CVE-2008-0952
prion3cve2nvd3cvelist3exploitdb2securityvulns2nessus1cert8seebug1