HP Intelligent Management Center Buffer Overflow and Denial of Service Vulnerabilities

Bugtraq ID:	106211
Class:	Design Error
CVE:	CVE-2018-7116 CVE-2018-7115 CVE-2018-7114
Remote:	Yes
Local:	No
Published:	Nov 29 2018 12:00AM
Updated:	Nov 29 2018 12:00AM
Credit:	The vendor reported the issue.
Vulnerable:	HP Intelligent Management Center (IMC) 7.3 E0605P04
Not Vulnerable:	HP Intelligent Management Center (IMC) 7.3 E0605P06

HP Intelligent Management Center Buffer Overflow and Denial of Service Vulnerabilities

HP Intelligent Management Cente is prone to the following security vulnerabilities:

1. Multiple buffer overflow vulnerabilities
2. A denial of service vulnerability

Attackers can exploit these issues to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely cause a denial-of-service condition.

HP Intelligent Management Center Buffer Overflow and Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

HP Intelligent Management Center Buffer Overflow and Denial of Service Vulnerabilities

References:

• HP HomePage (HP)
  
• HPE Intelligent Management Center (IMC), Remote Buffer Overflow, Code Execution (HP)