Signature Detail

HTTP: ManageEngine DesktopCentral AgentLogUpload Arbitrary File Upload

This signature detects attempts to exploit a known vulnerability in ManageEngine DesktopCentral. The vulnerability is due to lack of authentication and insufficient input validation in the AgentLogUploadServlet.class when processing HTTP requests. A remote unauthenticated attacker can upload arbitrary files to arbitrary locations. In a successful attack scenario,the attacker can execute arbitrary code with SYSTEM privileges by placing executable files in critical locations.

References

• BugTraq: 63784