Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter.
References
Link | Resource |
---|---|
http://marc.info/?l=bugtraq&m=126393370331959&w=2 | Vendor Advisory |
http://secunia.com/secunia_research/2009-48/ | Vendor Advisory |
http://secunia.com/advisories/37280 | Vendor Advisory |
http://www.securityfocus.com/bid/37873 | |
http://securitytracker.com/id?1023470 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2010-01-20 14:30
Updated : 2019-10-09 15:59
NVD link : CVE-2009-4000
Mitre link : CVE-2009-4000
JSON object : View
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Products Affected
hp
- power_manager