The version of HP LoadRunner installed on the remote host is prior to 11.52 Patch 1. It is, therefore, affected by multiple vulnerabilities :

  - Flaws exist in the Virtual User Generator that allow     directory traversal outside of a restricted path. These     can be exploited by a remote attacker to create files     with arbitrary content, thus leading to remote code     execution. (CVE-2013-4837, CVE-2013-4838)

  - A SQL injection vulnerability exists in the Virtual User     Generator that allows remote attackers to acquire     sensitive information, modify data, or cause a denial of     service. (CVE-2013-4839)

  - A flaw exists in the Virtual User Generator when     handling multiple unspecified methods that allows a     remote attacker to read, write, or delete arbitrary     files, thus leading to information disclosure or the     execution of arbitrary code. (CVE-2013-6213)

The version of HP LoadRunner installed on the remote host is prior to 11.52 Patch 1. It is, therefore, affected by multiple vulnerabilities :

  - Virtual User Generator に、制限されたパスの外側でディレクトリトラバーサルを可能にする欠陥が存在します。These can be exploited by a remote attacker to create files with arbitrary content, thus leading to remote code execution. (CVE-2013-4837, CVE-2013-4838)

  - A SQL injection vulnerability exists in the Virtual User Generator that allows remote attackers to acquire sensitive information, modify data, or cause a denial of service. (CVE-2013-4839)

  - A flaw exists in the Virtual User Generator when handling multiple unspecified methods that allows a remote attacker to read, write, or delete arbitrary files, thus leading to information disclosure or the execution of arbitrary code. (CVE-2013-6213)

遠端主機上安裝的 HP LoadRunner 版本比 11.52 Patch 1 舊。因此，會受到多個弱點影響：

- Virtual User Generator 中存在多個瑕疵，允許目錄遊走超出限制的路徑範圍。遠端攻擊者可惡意利用這些弱點，以任意內容建立檔案，從而導致遠端程式碼執行。(CVE-2013-4837、CVE-2013-4838)

- Virtual User Generator 中存在一個 SQL 插入弱點，允許遠端攻擊者取得敏感資訊、修改資料或造成拒絕服務。(CVE-2013-4839)

- Virtual User Generator 處理多個不明方法時存在一個瑕疵，其允許遠端攻擊者讀取、寫入或刪除任意檔案，從而導致資訊洩漏或執行任意程式碼。(CVE-2013-6213)

远程主机上安装的 HP LoadRunner 版本低于 11.52 Patch 1。因此，它受到多种漏洞的影响：

- 在 Virtual User Generator 中存在缺陷，允许在受限路径外进行目录遍历。远程攻击者可利用这些缺陷创建包含任意内容的文件，从而导致远程代码执行。（CVE-2013-4837、CVE-2013-4838）

- 在 Virtual User Generator 中存在一个 SQL 注入漏洞，允许远程攻击者获取敏感信息、修改数据或造成拒绝服务。(CVE-2013-4839)

- 当处理多种不明方法时 Virtual User Generator 中存在一个缺陷，允许远程攻击者读取、写入或删除任意文件，从而导致信息泄露或任意代码执行。(CVE-2013-6213)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
70806	HP LoadRunner < 11.52 Patch 1 Multiple Vulnerabilities	Nessus	Windows	2013/11/9	2018/11/15	critical
70806	HP LoadRunner < 11.52 パッチ 1 の複数の脆弱性	Nessus	Windows	2013/11/9	2018/11/15	critical
70806	HP LoadRunner < 11.52 Patch 1 多個弱點	Nessus	Windows	2013/11/9	2018/11/15	critical
70806	HP LoadRunner < 11.52 Patch 1 多种漏洞	Nessus	Windows	2013/11/9	2018/11/15	critical

检测

插件搜索

critical

critical

critical

critical