Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
APP:HPOV:CMD-INJ |
|---|---|
Severity |
Major |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Hewlett Packard OpenView Command Injection |
Release Date |
2015/02/10 |
Update Number |
2465 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
APP: Hewlett Packard OpenView Command Injection
This signature detects attempts to exploit a command injection vulnerability. It is due to insufficient validation of user-supplied input. A successful attack can lead to execute arbitrary commands in the context of the application.
Extended Description
Directory traversal vulnerability in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote malicious FTP servers to overwrite arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command.
Affected Products
- Microsoft ie 5.01
- Microsoft ie 5.5
- Microsoft ie 6.0
References
- BugTraq: 12160
- CVE: CVE-2004-1376