Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

Short Name

APP:HP-MGMT-FILE-UPLOAD

Severity

High

Recommended

No

Recommended Action

Drop

Category

APP

Keywords

HP Intelligent Management Center Arbitrary File Upload

Release Date

2013/04/01

Update Number

2250

Supported Platforms

di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+

APP: HP Intelligent Management Center Arbitrary File Upload


This signature detects attempts to exploit a known vulnerability against HP Intelligent Management Center. A successful attack can lead to remote code execution.

Extended Description

Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1611.

Affected Products

  • hp intelligent_management_center 5.0 (e0101)
  • hp intelligent_management_center 5.0 (e0101h03)
  • hp intelligent_management_center 5.0 (e0101h04)
  • hp intelligent_management_center 5.0 (e0101l01)
  • hp intelligent_management_center 5.0 (e0101l02)
  • hp intelligent_management_center up to 5.1 (e0101p01)
  • hp intelligent_management_center up to 5.1 (e0202)
  • hp intelligent_management_center up to 5.1 (e0202:enterprise)
  • hp intelligent_management_center_for_automated_network_manager up to 5.1 (e0202)

References

  • CVE: CVE-2012-5201
  • URL: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03689276

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out