NVD

Id
921  
Name
CVE-2008-0952  
Description
The AppendStringToFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to create files with arbitrary content via a full pathname in the first argument and the content in the second argument, a different vulnerability than CVE-2007-5608 and CVE-2008-0953.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-06-04  
Modified Date
2011-03-07  
Seq
2008-0952  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
5539 921 CVE-2008-0952 http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf  View
5540 921 CVE-2008-0952 29526  View
5541 921 CVE-2008-0952 29535  View
5542 921 CVE-2008-0952 1020165  View
5543 921 CVE-2008-0952 ADV-2008-1740  View
5544 921 CVE-2008-0952 HPSBMA02326  View
5545 921 CVE-2008-0952 hp-instantsupport-append-file-overwrite(42834)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48846 JVNDB-2008-004156 HP Instant Support の HPISDataManager.dll における任意の内容を持つファイルを作成される脆弱性 HP Instant Support の HPISDataManager.dll の HPISDataManagerLib.Datamgr ActiveX コントロールの AppendStringToFile 関数には、任意の内容を持つファイルを作成される脆弱性が存在します。 CVE-2008-0952 31065 CVE-2008-0952 921 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004156.html 2008-06-03 2012-09-25 View