Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2012-2986

Overview

Vulnerability Score 7.7 7.7
CVE Id CVE-2012-2986
Last Modified 21 Aug 2012 12:00:00
Published 20 Aug 2012 06:55:00
Confidentiality Impact COMPLETE COMPLETE
Integrity Impact COMPLETE COMPLETE
Availability Impact COMPLETE COMPLETE
Access Vector ADJACENT_NETWORK
Access Complexity LOW
Authentication SINGLE_INSTANCE

CVE-2012-2986

Summary

lhn/public/network/ping in HP SAN/iQ 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) first, (2) third, or (3) fourth parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-4361.

Vulnerable Systems

Application

  • Hp San%2fiq 9.5


References

CERT-VN - VU#441363


Last Updated: 27 May 2016 10:57:36