This host is running HP System Management Homepage (SMH) and is prone to command injection vulnerability.

Successful exploitation will allow an authenticated remote attacker to execute arbitrary commands. Impact Level: Application

Upgrade to version 7.2.2, or higher. For Updates refer to, http://h18013.www1.hp.com/products/servers/management/agents/index.html

The flaw is triggered when the ginkgosnmp.inc script uses the last path segment of the current requested URL path in an exec call without properly sanitizing the content.

HP System Management Homepage (SMH) version 7.2.1.3 and prior

Get the installed version of HP SMH with the help of detect NVT and check it is vulnerable or not.

• http://www.exploit-db.com/exploits/26420
• http://www.kb.cert.org/vuls/id/735364

---

Updated on 2017-03-28