HP.SMH.Iprange.Stack.Buffer.Overflow

Description

This indicates an attack attempt to exploit a Buffer Overflow vulnerability in HP System Management Homepage.
This vulnerability is due to an insufficient input validation error when the vulnerable software handles a crafted HTTP request. A remote attacker may be able to exploit this to execute arbitrary code within the context of the application, via a crafted HTTP request.

Affected Products

HP System Management Homepage (SMH) prior to 7.2.1

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Refer to the vendor's website for suggested workaround.
http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?docId=emr_na-c03839862-1
Note: This signature requires "SSL Inspection" in FortiOS 5.0 and above for detection.

References