Detections
Analytics

HP HPeDiag ActiveX Control Multiple Vulnerabilities

high Nessus Plugin ID 32055

Synopsis

The remote Windows host has an ActiveX control that allows reading and writing of arbitrary files.

Description

The remote host contains the HP Software Update software, installed by default on many HP notebooks to support automatic software updates and vulnerability patching.

The version of this software on the remote host includes an ActiveX control, 'HpeDiag', that reportedly contains multiple insecure methods - 'ReadTextFile()' and 'WriteTextFile()' - that are marked as 'Safe for Scripting' and allow for reading and overwriting arbitrary files on the affected system. If a remote attacker can trick a user on the affected host into visiting a specially crafted web page, this issue could be leveraged to effectively destroy arbitrary files on the remote host, potentially even files that are vital for its operation, or to read the contents of arbitrary files.

Solution

Either use HP Software Update itself to update the software or disable use of this ActiveX control from within Internet Explorer by setting its kill bit.

See Also

http://www.securityfocus.com/advisories/14540

Plugin Details

Severity: High

ID: 32055

File Name: hp_update_hpediag_activex_insecure.nasl

Version: 1.18

Type: local

Agent: windows

Family: Windows

Published: 4/25/2008

Updated: 7/12/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.5

CVSS v2

Risk Factor: High

Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/a:hp:software_update

Required KB Items: SMB/Registry/Enumerated

Exploit Ease: No known exploits are available

Patch Publication Date: 4/24/2008

Reference Information

CVE: CVE-2008-0712

BID: 28929