|Check Point Reference:||CPAI-2013-3518|
|Date Published:||4 Nov 2013|
|Protection Provided by:||
|Who is Vulnerable?|| HP IMC Branch Intelligent Management System Software Module (BIMS) 5,2 (E0401) and prior |
|Vulnerability Description||A code execution vulnerability exists in the Branch Intelligent Management Software (BIMS) module of Intelligent Management Center.|
|Vulnerability Details||The vulnerability is due to lack of authentication and insufficient input validation in the UploadServlet when processing HTTP requests. A remote attacker can upload arbitrary files to arbitrary locations. Successful exploitation of this vulnerability can let the attacker execute arbitrary code with SYSTEM privileges.|
This protection will detect and block attempts to exploit this vulnerability.
In order for the protection to be activated, update your product to the latest update. For information on how to update , go to SBP-2006-05, Protection tab and select the version of your choice.
SmartView Tracker will log the following entries:
Attack Name: HP Products Protection Violation
Attack Information: HP Intelligent Management Center BIMS UploadServlet Arbitrary File Upload