Lucene search
PRIOn knowledge basePRION:CVE-2013-6221HistoryJun 18, 2014 - 4:55 p.m.
Directory traversal
2014-06-1816:55:00
PRIOn knowledge base
www.prio-n.com
2
Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server is enabled, allows remote attackers to create arbitrary files and consequently execute arbitrary code via unspecified vectors, aka ZDI-CAN-2031.
| CPE | Name | Operator | Version |
|---|---|---|---|
| service_virtualization | eq | 3.0 |
References
packetstormsecurity.com/files/127247/HP-AutoPass-License-Server-File-Upload.html
www.osvdb.org/107943
www.securitytracker.com/id/1030385
zerodayinitiative.com/advisories/ZDI-14-195/
github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_autopass_license_traversal.rb
h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04333125
www.exploit-db.com/exploits/33891
Related
cve
cve
CVE-2013-6221
2014-06-18 16:55:06
packetstorm
packetstorm
HP AutoPass License Server File Upload
2014-06-27 00:00:00
nessus
nessus
HP AutoPass License Server Remote Code Execution (HPSBMU03045)
2014-06-27 00:00:00
securityvulns
securityvulns
zdi
zdi
Hewlett-Packard AutoPass License Server Remote Code Execution Vulnerability
2014-06-11 00:00:00
checkpoint_advisories
checkpoint_advisories
nvd
nvd
CVE-2013-6221
2014-06-18 16:55:06
zdt
zdt
HP AutoPass License Server File Upload Exploit
2014-06-27 00:00:00
cvelist
cvelist
CVE-2013-6221
2014-06-18 16:00:00