CVE-2009-4000

Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter.

Score

CVSS 2.0 10.0 Critical

Status

Modified - PSIRT-CNA@flexerasoftware.com

Published

2010-01-20

Last modified

2024-09-16

Weaknesses

CWE-22

Affected products

• Power Manager (Hp)

References

• http://marc.info/?l=bugtraq&m=126393370331959&w=2
• http://secunia.com/advisories/37280
• http://secunia.com/secunia_research/2009-48/
• http://securitytracker.com/id?1023470
• http://www.securityfocus.com/bid/37873