← back
CVE-2008-0952

CVE-2008-0952

EPSS 5.5%
The AppendStringToFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to create files with arbitrary content via a full pathname in the first argument and the content in the second argument, a different vulnerability than CVE-2007-5608 and CVE-2008-0953.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/31878unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/30516https://exchange.xforce.ibmcloud.com/vulnerabilities/42834http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264http://www.csis.dk/dk/forside/CSIS-RI-0003.pdfhttp://www.kb.cert.org/vuls/id/190939http://www.securityfocus.com/bid/29526http://www.securityfocus.com/bid/29535http://www.securitytracker.com/id?1020165http://www.vupen.com/english/advisories/2008/1740/references