Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Fri, 18 Mar 2011 14:42:08 +0800
From: YGN Ethical Hacker Group <>
Subject: CVE Request: HP System Management Homepage(SMH) | Open URL Redirection

Discovered by
Aung Khant (aungkhant<@>
YGN Ethical Hacker Group, Myanmar

HP System Management Homepage

Consolidated system management information helps IT Administrators predict,
diagnose, and rapidly respond to potential and actual system failures
for a single server.

Vendor: HP Inc (

Vulnerability Affected:
URL Redirection Abuse

Versions tested:

Versions affected:

Date published: 04-25-2010

Severity: Medium

Vulnerability Detail:
Attacker can lure victim to redirect to his choice of malicious site via the
trusted vulnerable SMH url. From there, serious attacks such as
browser exploits can be performed
to compromise victim's OS.


 - Remove red3201.html under hpsmh\data\htdocs\ directory OR
 - sanitize RedirectUrl variable OR
 - Wait for Vendor's fix in next 4-6 months

OWASP-TOP10-2010: A8 - Unvalidated Redirects and Forwards
WASC-38 URL Redirector Abuse
CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Advisory URL:

X-Advisory URL:

Disclosure Timeline:
03-10-2010: found vulnerability
04-12-2010: contacted vendor @
04-12-2010: vendor responded
04-14-2010: vendor confirmed and would release fix within 4 to 6 months.
04-25-2010: disclosed

Vendor Response (HP Software Security Response Team):
>We are able to duplicate the vulnerability.
>I expect we can resolve the vulnerability in the next SMH patch.
>Because regularly scheduled patches are easier for customers to incorporate
>we prefer to resolve vulnerabilities in those patches rather than in special hotfixes.
>I don't have a patch schedule, but normally SMH is patched every four to six months.

# yehg [04-25-2010]
last updated: 05-06-2010

Best regards,
YGN Ethical Hacker Group
Yangon, Myanmar
Our Lab |
Our Directory |

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.