Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:LANDESK-REMOTE-FILE-INC |
|---|---|
Severity |
Major |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
LANDesk Management Suite Remote File Inclusion |
Release Date |
2016/02/11 |
Update Number |
2644 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: LANDesk Management Suite Remote File Inclusion
This signature detects attempts to exploit a known vulnerability in LANDesk Management Suite. Successful exploitation could lead to arbitrary code execution.
Extended Description
The admin interface in Landesk Management Suite 9.6 and earlier allows remote attackers to conduct remote file inclusion attacks involving ASPX pages from third-party sites via the d parameter to (1) ldms/sm_actionfrm.asp or (2) remote/frm_coremainfrm.aspx; or the (3) top parameter to remote/frm_splitfrm.aspx.
Affected Products
- Landesk landesk_management_suite 9.6
References