CVE-2013-4841

Unspecified vulnerability in dbd_manager in LeftHand OS before 11.0 in HP StoreVirtual 4000 and StoreVirtual VSA Software (formerly LeftHand Virtual SAN Appliance) allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1509.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03995204
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03995204
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03995204
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03995204

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:hp:lefthand::::::::
	cpe:2.3:o:hp:lefthand:8.1:::::::*
	cpe:2.3:o:hp:lefthand:8.5:::::::*
	cpe:2.3:o:hp:lefthand:9.0:::::::*
	cpe:2.3:o:hp:lefthand:9.5:::::::*
	cpe:2.3:o:hp:lefthand:10:::::::*

OR	cpe:2.3:a:hp:storevirtual_virtual_storage_appliance:-:::::::*
	cpe:2.3:h:hp:storevirtual_4000:-:::::::*

History

21 Nov 2024, 01:56

Type	Values Removed	Values Added
References	~~() https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03995204 -~~	() https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03995204 -

Information

Published : 2014-02-26 14:55

Updated : 2024-11-21 01:56

NVD link : CVE-2013-4841

Mitre link : CVE-2013-4841

CVE.ORG link : CVE-2013-4841

JSON object : View

Products Affected

hp

lefthand
storevirtual_virtual_storage_appliance
storevirtual_4000

CWE

NVD-CWE-noinfo

{"id": "CVE-2013-4841", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-02-26T14:55:08.363", "references": [{"url": "https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03995204", "source": "hp-security-alert@hp.com"}, {"url": "https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03995204", "source": "hp-security-alert@hp.com"}, {"url": "https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03995204", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03995204", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in dbd_manager in LeftHand OS before 11.0 in HP StoreVirtual 4000 and StoreVirtual VSA Software (formerly LeftHand Virtual SAN Appliance) allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1509."}, {"lang": "es", "value": "Vulnerabilidad no especificada en dbd_manager en LeftHand OS anterior a 11.0 en HP StoreVirtual 4000 y StoreVirtual VSA Software (anteriormente LeftHand Virtual SAN Appliance) permite a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de vectores desconocidos, tambi\u00e9n conocido como ZDI-CAN-1509."}], "lastModified": "2024-11-21T01:56:30.887", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hp:lefthand:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FBBC0F6B-0EEF-4162-B7D6-1B51C71044E1", "versionEndIncluding": "10.5"}, {"criteria": "cpe:2.3:o:hp:lefthand:8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87783AFC-E191-405D-A28D-41304F40C5E6"}, {"criteria": "cpe:2.3:o:hp:lefthand:8.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "97123720-9CBF-4EBF-AF99-AFA1EB7451B4"}, {"criteria": "cpe:2.3:o:hp:lefthand:9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EC88CF39-EA00-4E4E-B6DB-68524B97E894"}, {"criteria": "cpe:2.3:o:hp:lefthand:9.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25176CF4-E268-4110-9C7B-906E3244BC1A"}, {"criteria": "cpe:2.3:o:hp:lefthand:10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E3652B9-64D0-439B-ADC9-E3DDD5511A04"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hp:storevirtual_virtual_storage_appliance:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D67048EE-6643-4A83-9A73-87E9474A1491"}, {"criteria": "cpe:2.3:h:hp:storevirtual_4000:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "678537E4-F48C-496D-894D-0022299D8893"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "hp-security-alert@hp.com"}