HP Discovery and Dependency Mapping Inventory Unauthorized Access Vulnerability

Bugtraq ID:	35250
Class:	Unknown
CVE:	CVE-2009-1419
Remote:	Yes
Local:	No
Published:	Jun 05 2009 12:00AM
Updated:	Jan 14 2010 07:51PM
Credit:	HP
Vulnerable:	HP Discovery and Dependency Mapping Inventory 2.1.3 HP Discovery and Dependency Mapping Inventory 2.1.2 HP Discovery and Dependency Mapping Inventory 2.1.1 HP Discovery and Dependency Mapping Inventory 2.1 HP Discovery and Dependency Mapping Inventory 2.0.3 HP Discovery and Dependency Mapping Inventory 2.0.2 HP Discovery and Dependency Mapping Inventory 2.0.1 HP Discovery and Dependency Mapping Inventory 2.0 HP Discovery and Dependency Mapping Inventory 7.51 HP Discovery and Dependency Mapping Inventory 7.50 HP Discovery and Dependency Mapping Inventory 2.51 HP Discovery and Dependency Mapping Inventory 2.22 HP Discovery and Dependency Mapping Inventory 2.21 HP Discovery and Dependency Mapping Inventory 2.20
Not Vulnerable:

HP Discovery and Dependency Mapping Inventory Unauthorized Access Vulnerability

HP Discovery and Dependency Mapping Inventory (DDMI) is prone to an unspecified unauthorized-access vulnerability.

Remote attackers can exploit this issue to gain unauthorized access to the DDMI agent.

UPDATE (January 14, 2010): Attackers can also exploit this issue to execute arbitrary code with SYSTEM-level privileges.

HP Discovery and Dependency Mapping Inventory Unauthorized Access Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP Discovery and Dependency Mapping Inventory Unauthorized Access Vulnerability

Solution:
Vendor fixes are available; please see the references for more information.

HP Discovery and Dependency Mapping Inventory Unauthorized Access Vulnerability

References:

• Micro News Homepage (phptoys)