7.7
CVSSv2

CVE-2012-4361

Published: 20/08/2012 Updated: 21/08/2012
CVSS v2 Base Score: 7.7 | Impact Score: 10 | Exploitability Score: 5.1
VMScore: 780
Vector: AV:A/AC:L/Au:S/C:C/I:C/A:C

Vulnerability Summary

lhn/public/network/ping in HP SAN/iQ prior to 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the second parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

hp san\\/iq 8.5

hp san\\/iq 8.1

hp san\\/iq 8.0

hp san\\/iq

Exploits

## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = ExcellentRanking ...
#!/usr/bin/python ''' ================================== Pseudo documentation ================================== ''' # HP VSA / SANiQ Hydra client # Nicolas Grégoire <nicolasgregoire@agarrifr> # v05 ''' ================================== Target information ================================== ''' HOST = '192168201 ...