HP OpenView Omniback II Unspecified Remote Arbitrary Command Execution Vulnerability

Bugtraq ID:	11032
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Dec 21 2000 12:00AM
Updated:	Dec 21 2000 12:00AM
Credit:	Discovery is credited to Digit <[email protected]>.
Vulnerable:	HP OpenView OmniBack II 1.2
Not Vulnerable:

HP OpenView Omniback II Unspecified Remote Arbitrary Command Execution Vulnerability

OpenView Omniback II is reported prone to an unspecified remote command execution vulnerability. This issue can allow a remote attacker to gain superuser privileges on a vulnerable computer.

All versions of OpenView Omniback II are considered vulnerable to this issue.

HP OpenView Omniback II Unspecified Remote Arbitrary Command Execution Vulnerability

Exploit code is provided.

Exploit code has been released as part of the Metasploit Framework as well.

• /data/vulnerabilities/exploits/openview_omniback.pm
• /data/vulnerabilities/exploits/omniback_exp.c

HP OpenView Omniback II Unspecified Remote Arbitrary Command Execution Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

HP OpenView Omniback II Unspecified Remote Arbitrary Command Execution Vulnerability

References:

• Metasploit Framework Exploits (Metasploit)