Path Traversal in HP Network Virtualization
CVE-2014-2626
Directory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6 (aka Shunra Network Virtualization) allows remote attackers to create files, and consequently execute arbitrary code, via crafted input, aka ZDI-CAN-2024.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.194 (97.1th percentile) — read the EPSS interpretation.
Affected products
- Hp Network_virtualization — versions 8.6
- N/a — versions n/a
Weakness classification (CWE)
References
- hp-security-alert@hp.com (vdb-entry, x_refsource_SECTRACK)
- hp-security-alert@hp.com (x_refsource_SECUNIA, third-party-advisory)
- hp-security-alert@hp.com (x_refsource_MISC)
- hp-security-alert@hp.com (Vendor Advisory, x_refsource_HP, vendor-advisory)