Description
The Agent (aka AgentController) servlet in HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager (IDM) 4.0 allows remote attackers to execute arbitrary commands via a HEAD request, aka ZDI-CAN-1745.
References
- HPSBPV02918 vendor-advisory
- 1029010 vdb-entry
- http://zerodayinitiative.com/advisories/ZDI-13-228/
- 54788 third-party-advisory